Tags: robots
Rating:
**Description**
> Easy web challenge in the slimmest possible design.... namely none.
>
> http://ez-web.ctf.hackover.de:8080
**No files provided**
**Solution**
We are presented with a simple "under construction" text, accompanied by a GIF that doesn't exist.
```html
<head>
<title>Under Construction</title>
</head>
<body>
`/flag.txt` doesn't exist, but we can check [`robots.txt`](https://en.wikipedia.org/wiki/Robots_exclusion_standard):
```
User-agent: *
Disallow: /flag/
```
The `/flag/` directory contains `flag.txt`, but we are not allowed to see it:
```html
<head>
<title>Restricted Access</title>
</head>
<body>
You do not have permission to enter this Area. A mail has been sent to our Admins.
You shall be arrested shortly.
But the server simply sent us a cookie `isAllowed=false`, so changing that to `true`, we can see the flag.
`hackover18{W3llD0n3,K1d.Th4tSh0tw4s1InAM1ll10n}`
