Authors: Nathan Yam, Jonathan Kartawidjaja

image.png

Initial Enumeration

Stage 1: Discovering Strange HTML Comments

Once you visit the website, you are met with a static web component.

image.png

If we hit f12 on your keyboard, you can inspect the web source of the page.

image.png

Here you will find a strange comment referring to an anti-web-spider file.

Stage 2: Finding Robots.txt

robots.txt is a common file used on webservers to prevent web spiders and browsers from showing specific web content during browsing. We can attempt accessing robots.txt like so:

<https://wcsc-work-in-progress-website.chals.io/robots.txt>

When we access the file, we can see one disallowed entry:

image.png

Stage 3: Visiting the Admin Dashboard

We can attempt to visit that endpoint with the following URL:

<https://wcsc-work-in-progress-website.chals.io/4dm1n_d4shb0Ard>