maik/Personal-Website
1
0
Fork 0
mirror of https://github.com/maikka39/Personal-Website.git synced 2026-10-24 06:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Rewrite challenge 1

Browse Source
This commit is contained in:
maik
2020-12-03 11:45:39 +01:00
parent 2e6a2f6e82
commit 13a9947bff
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/posts/adventofctf/challenge_1.md
+5 -3
View File
@@ -27,19 +27,21 @@ Visit <https://01.adventofctf.com> to start the challenge.
## Solution ## Solution
When taking a look at the source we find the following comment: When opening the page, we're asked for Santa's password. Unfortunately, we don't know the password. Don't stop there though, mayby someone has hidden it in the source html.
Let's open the source by pressing `Ctrl + U` and take a look at it. Near the bottom we find the following comment:
```html ```html
<!-- This is an odd encoded thing right? YWR2ZW50X29mX2N0Zl9pc19oZXJl --> <!-- This is an odd encoded thing right? YWR2ZW50X29mX2N0Zl9pc19oZXJl -->
``` ```
If we then use `base64` to decode this string we get `advent_of_ctf_is_here`. This looks like a `base64` encoded string so let's use the program `base64` with the `-d` decode flag to decode the text.
```bash ```bash
> echo "YWR2ZW50X29mX2N0Zl9pc19oZXJl" | base64 -d > echo "YWR2ZW50X29mX2N0Zl9pc19oZXJl" | base64 -d
advent_of_ctf_is_here advent_of_ctf_is_here
``` ```
We can then enter this string on the challenge website after which it will give us the flag: `NOVI{L3T_7H3_M0NTH_0F_FUN_START}`. We get some plain text. If we enter it as Santa's password on the challenge page, it gives us the flag: `NOVI{L3T_7H3_M0NTH_0F_FUN_START}`.
This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#1-2). This flag can then be submitted for the [challenge](https://ctfd.adventofctf.com/challenges#1-2).