Pistas

1. The server proudly announces its identity in every response. Look closely; you might find something unusual.
2. The gatekeeper's instructions often reveal what should remain unseen. Don't forget to read between the lines.
3. Anonymous access sometimes leads to forgotten treasures. Connect and explore the directory; you might stumble upon something valuable.
4. A well-named database can be quite revealing. Peek at the configurations to discover the hidden treasure.

Para la primera flag, basta con hacer un nmap y ver que output nos da.

nmap -sV -sC 192.154.8.3 

FLAG1_dd4c7cb7fb9c4d6bace43ba83e042237

Ahora vamos con la segunda flag, la pista habla del guardian y hemos visto el puerto 80 abierto, a si que vamos a ver que hay en robots.txt

Vemos una ruta sospechosa llamada /secret-info/

Contiene un archivo llamado flag.txt

FLAG2_ebc144db6b0d47babd42135af5c569fe