recon_02 (/.well-known/security.txt)

View the exercise here: PentesterLab: Recon 02

OBJECTIVE

For this challenge, your goal is to retrieve the security.txt from the main website for hackycorp.com.

THE SECURITY.TXT FILE

The security.txt file is used to tell security researchers how they can disclose vulnerabilities for a website. You can learn more about it here: securitytxt.org and on Wikipedia: Security.txt.

SOLUTION

The /.well-known/security.txt is a file used to provide security-related information about a website. Go to hackycorp.com/.well-known/security.txt to find the flag for this challenge.