Falaj 18: Internal Page

Many services are reachable only from inside a network, and configuration files often name them. Reading a configuration to learn where a service lives is a routine reconnaissance step for defenders and attackers alike, which is why internal addresses and paths should not be treated as secrets.

A settings file in your home directory names an internal report page: a host and a path. The host exists only on this lab's simulated network. Use curl to request the page and read what it returns. There are a few pages on that host, and only the one named in the settings file holds the password for the next level.

Check what you request: a wrong path gives a not-found response, and a right one gives a page. This is a simulated shell over invented files: it understands a teaching subset of commands, and help lists them. When you have the password for level 19, run login 19 <password> or paste it into the answer box.