Task 11 - Sensitive Data Exposure (Challenge)

Task 11 [Severity 3] Sensitive Data Exposure (Challenge)

What is the name of the mentioned directory?

{% hint style="warning" %} HINT: Have a look at the source code on the /login page. {% endhint %}

Reveal Flag 🚩

🚩/assets

Navigate to the directory you found in question one. What file stands out as being likely to contain sensitive data?

Reveal Flag 🚩

🚩webapp.db

Use the supporting material to access the sensitive data. What is the password hash of the admin user?

Reveal Flag 🚩

🚩6eea9b7ef19179a06954edd0f6c05ceb

Crack the hash. What is the admin's plaintext password?

{% hint style="warning" %} HINT: Read the supporting material {% endhint %}

Reveal Flag 🚩

🚩qwertyuiop

Login as the admin. What is the flag?

Reveal Flag 🚩

🚩THM{Yzc2YjdkMjE5N2VjMzNhOTE3NjdiMjdl}