DirectoryLister VS CyberChef

This may be https://www.directorylister.com/ ? Ideal for holding / hosting files divided into folders + README.md file

Note: If it helps in any way, the resources I'm trying to upload to the nginx container are the ones related to the Directory Lister installation, so it's not a website actually, but uses index.php.

Ubuntu 22.04 - I've used Directory Lister many times on servers to graphically list files in a directory. I have a new VPS setup with a fresh apache install and php 8.2. I initially had errors with dom and zip not installed that I think I've fixed. I've changed /etc/apache2/mods-enabled/dir.conf to put php first:

DirectoryLister is very lightweight and free. The only thing it doesn't do is password/login, but you could do that at the server level. I use this on a DreamHost shared server, so it definitely works there. It's written in PHP, so it was very easy for me (a non programmer) to edit the footer of the output to include a link to tools located elsewhere.

Directory Lister - Also requires hosting, but free open source file repository platform that makes it easy to have a repository of tools, downloads, etc within an intranet or publicly if necessary.

Directory Lister is pretty cool and the design looks great.

Then we take the encrypted text and use CyberChef to decrypt it.

Let's go to CyberChef and insert our pieces of evidence.

A parameter was changed from '2AMBCgIQBg' to 'CgIIAdgDAQ%3D%3D' which is just the correct base64 encoding they should have been using the entire time.

I don't think this was a hostile action by Google, I think someone just added better input validation for security reasons and it accidently broke the bad requests they were sending.

https://gchq.github.io/CyberChef/#recipe=URL_Decode()From_Ba...

❗This is indeed the flag, but the text is encrypted with Base64. Usually, the presence of padding character "=" indicates that's Base64 type of encoding (but that's only one of the hints). To decrypt it, we can use CyberChef. Copy-paste the text and we either:

It uses a combination of magic bytes (like the `file` command), entropy analysis and character frequency detection to determine whether an output is likely to be of interest to the user.

The file type mechanism is written here[0]. There's a list of all signatures we detect here[1].

[0] https://github.com/gchq/CyberChef/blob/master/src/core/lib/F...

I think this can be deciphered using CyberChef...