Web
Mission Brief
DEAD (department for energy and atomic development) are keen on outsourcing. We would like to know more about who they are outsourcing to, and what they are up to. To help us build our understanding of DEAD, please investigate the areas of interest outlined below.
Intel Leads
Strange Documents
There’s rumours of documents not on the list. Can you find any?
Are there any private documents that have bad auth?
Are there any pages under construction? What is the path url under construction?
And if there are any, what would it’s id be?
Scraping the Web
We’re very open to people scraping our website. There’s a lot of information there, and we want to make sure it’s all accessible. There is one person we don’t like though…
Data Request
The other week, one of our partners experienced a cyber attack. One message seems to identify the attacker. Who was it?
Employee message board
We found that someone had a compromised account, they had the user inya with a password of password123.
The employees at DEAD have a message board. Including the IT department. What is their password?
What is the admin’s password?
Background Checks
It seems our IT guy misconfigured something so this is public. I hope there’s nothing too sensitive on there…