Realist

I’m stuck on this challange and I tried everything. and the hint of "dont look too far" is freaking me out becasue i tried a lot of things and it sounds like it supposed to be simple.
I got to the images directory but couldn’t find anything useful there. I found the admin page which asking for authentication.
I tried to look for page inside the admin directory but failed (i.e: ...ch3/admin/index.php).
should i try bruteforce the authentication or its wrong direction?
im really lost!

Bruteforce is wrong direction. The path to solution is one of the tests in the OWASP testing guide. As a hint let me tell you that there is a challenge in the Web-Server section that makes you use the same technique to solve the challenge.
Best of luck,
NonStandardModel

You are stuck? You are lost? Maybe you are angry.
Well, when you are really, really angry, you will DELETE the damn website!
Pay attention, i didn’t say destroy, or erase and i didn’t even say delete...
I said DELETE

That’s a funny hint. Like it :)