Sebastian's Blog

software developer. security enthusiast.

Day: 23 December 2019

HV19.23 Internet Data Archive

The page asks for a username and files to be downloaded. Dowloading the flag is not allowed. Submitting the form leads to another page with a download link and the password for the generated zip file. The generated files are all stored within the /tmp folder. Apache allows indexes on this folder so sorting the […]