Ulli Weichert/ April 7, 2022/ IT-Security, Write-Ups/ 0Kommentare

Local Authority

Description

Can you get the flag?
Go to this website and see what you can discover.

Solving

1. Downloaded website via 'wget http://saturn.picoctf.net:50959/'
2. Looked at the site - just a normal site with a login prombt.
3. Looking at sourcecode.
   1. Action is calling 'login.php' -- downloading as well
4. In 'login.php' a 'secure.js' is included... downloading
5. There is a password in the 'secure.js'

   function checkPassword(username, password)
   {
   if( username === 'admin' && password === 'strongPassword098765' )
   {
   return true;
   }
   else
   {
   return false;
   }
   }

6. With this password we can login and get our flag

Flag

picoCTF{j5_15_7r4n5p4r3n7_b964a657}

You could use our get flag script for this challenge as well 🙂

#!/bin/bash
curl -X POST "http://saturn.picoctf.net:50959/admin.php" -d hash=2196812e91c29df34f5e217cfd639881 | grep -o "picoCTF{.*}"