🧪 Lab: Debug Page Disclosure

ℹ️ Info

This lab contains a debug page that discloses sensitive information about the application.

🎯 Goal

To solve the lab, you need to obtain and submit the SECRET_KEY environment variable.

📝 Thought Process

• First, I scrolled through the application but didn’t find anything useful.
• Next, I checked the source code and found a path disclosure.

• Following that, I discovered a hidden debug page:

  /cgi-bin/phpinfo.php
  
  

• Visiting this URL opened the phpinfo page 🔍 which displayed detailed environment variables.

✅ Result

• From the phpinfo page, I copied the value of the SECRET_KEY.
• Submitted it in the lab interface.
• 🎉 The lab was solved successfully!