Walking An Application

• What is the flag from the HTML comment?

THM{HTML_COMMENTS_ARE_DANGEROUS}

• What is the flag from the secret link?

THM{NOT_A_SECRET_ANYMORE}

• What is the directory listing flag?

THM{INVALID_DIRECTORY_PERMISSIONS}

• What is the framework flag?

THM{KEEP_YOUR_SOFTWARE_UPDATED}

• What is the flag behind the paywall?

THM{NOT_SO_HIDDEN}

• What is the flag in the red box?

THM{CATCH_ME_IF_YOU_CAN}

• What is the flag shown on the contact-msg network request?

THM{GOT_AJAX_FLAG}