Skip to main content
Room Banner
Room Icon

Room 404

He booked the quiet room. It's not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it never lists are the ones worth finding.

easy

30 min

662

User profile photo.
User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off
 
 
 
Hacker Holidays ยท The Byte Lotus Hotel
Room 404
  ๐Ÿš  
๐Ÿš
 
 
 
 
 
 
๐ŸŒด
๐ŸŒด
๐Ÿฅฅ
๐Ÿฅฅ
๐Ÿฆ
๐Ÿน
 
Points
30
Category
Web
Difficulty
Very Easy
 
๐Ÿ›Ž๏ธ Concierge Briefing

He booked the quiet room. It's not on the floor plan, not in the brochure, not on any door. But port 8080 is wide open, and the rooms it never lists are the ones worth finding.

Welcome to the Byte Lotus, where the WiFi is open, the app is free, and the concierge already knows your coffee order. You spend these first days as a guest who simply notices things โ€” a room that isn't on the floor plan, packets that leave every night at the same hour, a profile assembled from two breakfasts and a livestream.

The Byte Lotus guest-experience platform went live in a hurry, and the night-shift developer shipped more than the website.

๐Ÿ—๏ธ ROOM ACCESS
Lab Machine
://MACHINE_IP:8080
๐Ÿ–๏ธ TODAY'S ITINERARY
 Dump the exposed source code.
 Find the flag.
Web Directory Enumeration
Answer the questions below

What is the flag?