🔍 01 — Reconnaissance
0/3 solved
📄 Easy — Hidden Endpoints (robots.txt)
Many web applications use robots.txt to tell search engines which paths not to index. Attackers can use this file to discover hidden or sensitive endpoints.
Your mission: Find the hidden admin panel by reading /static/robots.txt.
Loading...
🏆 Flag:
FLAG{01-recon_easy_74580d30}
Look at
/static/robots.txt — it lists a Disallow: /admin-secret-panel entry. Visit that path!