Backup Leakage

Level: Apprentice

• In this lab there is a hidden file that contains a piece source code of source-code of the application.

• Here I found I have access to robots.txt. In the content we see another directory called backup.

• Here we can directory list the directory hopefully and get that interesting file of the page. Not always we're going to have the capacity of directory listing throw one of these things, sometimes we might need to brute-force for an interesting file.