{"id":240,"date":"2019-01-17T05:05:37","date_gmt":"2019-01-17T05:05:37","guid":{"rendered":"https:\/\/mrjsec.co.uk\/blog\/?p=240"},"modified":"2019-01-17T05:05:46","modified_gmt":"2019-01-17T05:05:46","slug":"objective-2-directory-browsing","status":"publish","type":"post","link":"https:\/\/mrjsec.co.uk\/blog\/objective-2-directory-browsing\/","title":{"rendered":"
Objective 2: Directory Browsing<\/center>"},"content":{"rendered":"\n

The objective here is to find the name (First and last name) who rejected the talk tilted “Data Loss for Rainbow Teams: A Path in the Darkness?”. from the website<\/a>.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

If we need any hints, we need to talk too “Minty Candycane” once we have compleated “The Name Game Cranberry Pi terminal challenge.” given by Minty Candycane.
\n“Thank you so much for your help! I’ve gotten Mr Chan his name tag. I’d love to repay the favour.
\nHave you ever visited a website and seen a listing of files – like you’re browsing a directory? Sometimes this is enabled on web servers.
\nThis is generally unwanted behaviour. You can find loads of examples by searching the web for index.of.
\nOn a website, it’s sometimes as simple as removing characters from the end of a URL.
\nWhat a silly misconfiguration for leaking information!” <\/p>\n\n\n\n

Also, a hint link<\/a>.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

So this time was not given a URL of any sort! However, it’s pretty straight forward and simple.<\/p>\n\n\n\n

Heading over to https:\/\/cfp.kringlecastle.com\/ we see the following webpage.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

So, let’s try and apply for the KringleCon conference! Clicking on the “Apply Now!” button takes us to another page (https:\/\/cfp.kringlecastle.com\/cfp\/cfp.html)<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Moreover, if we were to remove the cfp.html part from the end of the URL (Just as the hint gives!), then we get this page.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

So we get two files “cfp.html”, “rejected-talks.csv<\/a>” and ..\/goes back a page, which brings us to cfp.html again.
As the name suggests, we need the file rejected-talks.csv as we need to find the name (First and last name) who rejected the talk tilted “Data Loss for Rainbow Teams: A Path in the Darkness?”<\/p>\n\n\n\n

Opening the file in Firefox, we can see many talks that got rejected. I’m not sure why they all got denied, but that’s not why we’re here. We need to find the name!<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Using Ctrl + F within firefox to open the find function, and looking for the text “Data Loss for Rainbow Teams” we find this string “qmt3,2,8040424,200, FALSE, FALSE, John, McClane, Director of Security, Data Loss for Rainbow Teams: A Path in the Darkness,1,11.”<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

So, the answer here is John McClane (First and last name), pretty simple and straight forward this one was, but still pretty fun!<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"

The objective here is to find the name (First and last name) who rejected the talk tilted “Data Loss for Rainbow Teams: A Path in the Darkness?”. from the website. If we need any hints,…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[10],"tags":[13,14,12],"class_list":["post-240","post","type-post","status-publish","format-standard","hentry","category-kringlecon-2018","tag-13","tag-ctf","tag-kringlecon"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/paD3U6-3S","_links":{"self":[{"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/posts\/240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=240"}],"version-history":[{"count":1,"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/posts\/240\/revisions"}],"predecessor-version":[{"id":249,"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/posts\/240\/revisions\/249"}],"wp:attachment":[{"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=240"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mrjsec.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}