DarkCTF

gpg-verify.sh

# DarkCTF (ctf.darkarmy.xyz)
# Chall Name: P_g_G_i_P_t
# Author: pr0PM

# To verify the signature the most common way is using:
# gpg --verify <detached file> <file-to-check-against>
# The bruteforce + hashcat is innovative but that wasted a lot of your time

# Here is the intended solution
# Guess why the filenames were still a number not some random string :)

for i in {0..10000}; do
if gpg --verify a.sig ./10k/$i 2>/dev/null; then
  echo $i
  exit 0
fi
done

echo "Trash Author + Trash Challenge"