Struggling with SSRF 1.3 Challenge Exercise

Career Paths Penetration Tester
1

I managed to get through 1.1 and 1.2 of the SSRF stuff.

It’s quite confusing and I feel like I need a little more instruction or a cheeky hint on where I need to go to get the flag in 1.3.

I can’t seem to figure it out, I know which port it is, and I also know the file, but I can’t access the file because I get a 403 forbidden. At least I think I know these things?

The Pen Testing Career Path has been good so far but this one is confusing me (I think it might be a bit too blunt in instructions?).

Any help would be great!

2

Okay I did find the flag, but I’m not really sure I did it the “right” way, if that makes sense?

I made a little script and did it through the console, but previous lessons were through the php web page example.

Just pretty confused but still managed it so yay?