2 :80 bottleneck

http://192.168.65.22/
Bottleneck website landing page

$ gobuster dir -u http://192.168.65.22 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x php,html,txt -t 80
===============================================================
/img                  (Status: 301) [Size: 162] [--> http://192.168.65.22/img/]
/index.php            (Status: 200) [Size: 10175]
/css                  (Status: 301) [Size: 162] [--> http://192.168.65.22/css/]
/js                   (Status: 301) [Size: 162] [--> http://192.168.65.22/js/]
/vendor               (Status: 301) [Size: 162] [--> http://192.168.65.22/vendor/]
/image_gallery.php    (Status: 200) [Size: 6381]

http://192.168.65.22/image_gallery.php
random images on page

# cant find anything, using burp to intercept.
# when looking at request for /image_gallery.php; there's a subsequent request to
GET /image_gallery.php?t=1629343132&f=Ym90dGxlbmVja19kb250YmUucG5n

$ echo "Ym90dGxlbmVja19kb250YmUucG5n" | base64 -d
bottleneck_dontbe.png

# even source code shows images being loaded as 
<img class="img-fluid" src="image_gallery.php?t=1629343196&f=Ym90dGxlbmVja19kb250YmUucG5n" alt="">

# value of t= keeps changing everytime the page is reloaded; possibly a timestamp

Last updated