# Employee Directory (CTF challenge)

> Acme's staff directory lets anyone view employee profiles by an id in the URL (/profile?id=NNNN). The directory only links a handful of employees — but the server happily returns any id you ask for.

Canonical: https://codelivly.com/ctf/challenges/employee-directory

| | |
|---|---|
| Category | Web Exploitation |
| Difficulty | Easy |
| Points | 150 |
| Estimated time | 12 min |
| Type | Live instance |
| Solves | 56 |
| Author | Codelivly |

Acme's staff directory lets anyone view employee profiles by an id in the URL (/profile?id=NNNN). The directory only links a handful of employees — but the server happily returns any id you ask for. One profile that isn't listed holds the flag.

## Related

- [All CTF challenges](https://codelivly.com/practice?type=ctf)