commit f83d5a1fd29ee6b091f6e1e5d8044a3cc54ef5e5 parent 972a915b048f39855cf9b9491a1d774131440303 Author: pyratebeard <root@pyratebeard.net> Date: Mon, 13 May 2019 23:56:00 +0100 misc section - 0ld is g0ld challenge Diffstat:
| M | projects/hackthebox.md | | | 21 | +++++++++++++++++++-- |
1 file changed, 19 insertions(+), 2 deletions(-)
diff --git a/projects/hackthebox.md b/projects/hackthebox.md @@ -28,7 +28,7 @@ url: https://www.hackthebox.eu/invite - copy invite code into input box and submit ## web -### lernaean (20 pts) +#### lernaean (20 pts) - open url:port provided from instance - proxy page through burpsuite - submit password to see response @@ -52,4 +52,21 @@ url: https://www.hackthebox.eu/invite - check response in burp to find HTB flag ## misc -### 0ld is g0ld +#### 0ld is g0ld (10 pts) +- download zip file +- unzip a password protected pdf +- use `pdfcrack` to bruteforce password + ``` + pdfcrack -f 0ld\ is\ g0ld.pdf -w /path/to/rockyou.txt + ``` +- open pdf with password +- scroll to bottom and zoom in a lot to find morse code + ``` + .-. .---- .--. ... .- -- ..- ...-- .-.. -- ----- .-. ... ...-- + ``` +- translate code + ``` + R1PSAMU3LM0RS3 + ``` +- submit flag (wrap with HTB{<string>}) +