Skip to content

Instantly share code, notes, and snippets.

@dm4uz3
Last active March 19, 2018 14:18
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dm4uz3/e6972c847e12d73533c3deba278fa13c to your computer and use it in GitHub Desktop.
Save dm4uz3/e6972c847e12d73533c3deba278fa13c to your computer and use it in GitHub Desktop.
Puzzle #3 full walkthrough - discord.gg/bx9mxG4

Server 1

An ssh address was given. The username was the channel ID and the password the channel topic. When connected, base 64 was shown that became the invite link.

Server 2

You're given a github gist link, which contains a download to a zip and 2 codeblocks with numbers. In this step the numbers are misleading. The password of the zip is free-pizza, which was placed everywhere and you're all retarded lmao.

Server 3:

In this step you're told by my video that the code blocks from #2 are used here. The first one is a numeric alphabet (A=1, B=2 ... Z=26). After decoding this you'll be left with some text, which you'll have to rot13.

C U T D O W N T H E W O O D S

Honestly, I wasn't expecting anyone to get this one but with the help of google you'd find out this is straight up ripped off from the defcon 22 badge challange. What you have to do here is remove the Wood's numbers (here's a list) from the second code block. 124 101 96 112 109 97 98 117 107 120 105 118 102 94 117 becomes 101 109 97 98 117 107 105 102 117. Translate this from decimal to ascii and you get emabukifu, which you then apprend to my website to get https://dm4uz3.pt/emabukifu/

Server 4:

You're given a jpg and a wav, which have the numbers 1234 and 5678. Both of these files had steganography applied, to decrypt them you can use steghide.

$ steghide extract -sf ebic-cat.jpg -xf a.txt

and

$ steghide extract -sf yes.wav -xf b.txt

The passwords were the numbers next to each of them. Put a.txt and b.txt together and you'll get the invite to the end server.


It was easy, right? :^)

@dm4uz3
Copy link
Author

dm4uz3 commented Mar 19, 2018

first

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment