GoBuster Enumeration Challenge // Flag Submission Portal

FLAG SUBMISSION

You've been recon-ing the Westbrook Academy site using GoBuster. Submit the flags you find hidden across the site's pages. Flags are in the format FLAG{...}

CAPTURE PROGRESS 0%
// SUBMIT FLAG
CAPTURE STATUS 0 / 25 FLAGS CAPTURED
# Flag ID Location Points Status
// RECON HINTS
1
GoBuster basics: Run gobuster dir -u http://TARGET -w /usr/share/wordlists/dirb/common.txt to enumerate directories.
2
robots.txt: Always check http://TARGET/robots.txt — web crawlers are told which pages to avoid, which means those pages exist.
3
View Source: Flags hidden in HTML comments won't show on screen — right-click → View Page Source (Ctrl+U) to find them.
4
Hidden directories: GoBuster will find /admin, /dev, /backup, /staff and more. Check each one thoroughly.
5
GoBuster with extensions: Try -x html,txt,php,bak to also catch files, not just directories.