Challenges

  1. I successfully found credentials on an admin page.

    1. I utilized gobuster to check an Ip and Port. That pointed me to a couple of other DNS addresses.

    2. On the robots.txt I found a hidden DNS for an admin login page.

    3. I viewed the source code for that page and found a set of test login credentials in the comments part of the HTML.

    4. They worked!

Last updated