- State “DONE” from
When we open the page, we are greeted with the following message:
Okay, the first thing we want to do is check the source code. There is an interesting line here:
<img src="files/pixel.png">Looking at the picture we only see one pixel, so nothing interesting there really. However, there is another important information here, which is the filepath files/pixel.png. If we look at URL + /files, then we see that we are actually able to access this folder and find a users.txt file containing the password.
- 3gqisGdR0pjm6tpkDKdIWO2hSvchLeYH