Hi!

Try looking at everything in that directory. You may find the answer.

First you should learn about how a URL works:

Absolute URL:

Relative URL:

1. Things between brackets are optional.
2. Upper case words are variables.

Absolute URLs Example:

a. Often the PROTOCOL for HTML documents is HTTP or HTTPS.
b. For this site the HOST is www.zeroidentity.org.
c. Also ZI works at the PORT 80. That's the regular port for HTTP protocol, so you don't need to put it explicitly.
d. And the PATH and GET_PARAMETERS are the rest of the URL.(This will be better explained in the Relative URL part)

So this is a regular URL for Zero Identity:

or without putting explicitly the PORT:


Relative URLs Example:

Let's say you are at this page:


Then now we know:
PROTOCOL = https
HOST = www.zeroidentity.org
PORT = 1337
PATH = /directory_1/directory_2/index.php
GET_PARAMETERS = id=1

The PATH has two directories and the file is index.php. A directory is like a folder in your desktop. So we can conclude the file index.php is located inside a directory called directory_2 and this directory_2 is located inside directory_1. You should notice index.php is one file, maybe that directory (directory_2) has more than one file, and even you'll find in there more directories. The directory_1 works the same as the directory_2. If you want to see what's inside any of those directories just search for them:

For directory_1:

For directory_2:


Often directory listings are forbidden, but you never know ;)

Relative paths work this way:

a. ./ Current directory.
b. ../ Previous directory.

If you are here:


If you find a link like this:
./index.php
you'll go to the same page you are right now
https://www.zeroidentity.org:1337/directory_1/directory_2/index.php

If you find a link like this:
../index.php
you'll go to a previous directory:
https://www.zeroidentity.org:1337/directory_1/index.php

If you find a link like this:
../../index.php
you'll go to a previous directory:
https://www.zeroidentity.org:1337/index.php

And now you can understand that a link like this:
././././../././././../././././index.php
will take you here:
https://www.zeroidentity.org:1337/index.php

GET_PARAMETERS

They help the programmer make dinamic web pages. Sometimes you can find major bugs and vulnerabilities there like SQL injections, Cross Site Scripting attacks (XSS), Cross Site Request Forgery (XSRF), Redirections, among others.

It's always helpful to know the theory before you go and put in practice what you know. =D

I'm glad you found it helpful =D