Pistas

  1. This tells search engines what to and what not to avoid.
  2. What website is running on the target, and what is its version?
  3. Directory browsing might reveal where files are stored.
  4. An overlooked backup file in the webroot can be problematic if it reveals sensitive configuration details.
  5. Certain files may reveal something interesting when mirrored.

La primera pista es clara, debemos ir a robots.txt

image.png

FLAG1{fd846432423144d184ef2aa9ee6f2e8f}

Para la segunda usaremos nmap

nmap -sV -sC -p80 target.ine.local

image.png

FL@G2{debf93fd55034886833912b9fe9579bf}

La tercera nos habla de listar directorios, a si que usaremos dirb

dirb <http://target.ine.local>