Plant Photographer
Dig deeper and try to uncover the flag hidden behind the scenes.
hard
60 min
2,247
To access material, start machines and answer questions login.
Set up your virtual environment
Your friend, a passionate botanist and aspiring photographer, recently launched a personal portfolio website to showcase his growing collection of rare plant photos:
http://MACHINE_IP/
Proud of building the site himself from scratch, he’s asked you to take a quick look and let him know if anything could be improved. Look closely at how the site works under the hood, and determine whether it was coded with best practices in mind. If you find anything questionable, dig deeper and try to uncover the flag hidden behind the scenes.
What API key is used to retrieve files from the secure storage service?
What is the flag in the admin section of the website?
What flag is stored in a text file in the server's web directory?
Ready to learn Cyber Security?
TryHackMe provides free online cyber security training to secure jobs & upskill through a fun, interactive learning environment.
Already have an account? Log in