← All Challenges
Challenge 16 of 66
Backup Bandit
🔵 Easy
Recon
+50 XP
The admin left a backup of the login page. Try common backup extensions like .bak, .old, .swp to find the source code.
Try /login.php.bak or /login.php~ — editors often leave backup files.