pull down to refresh

$ find ~ -type f -print0 | xargs -0 -I{} sh -c 'f=$1; { for c in cat "zcat -f" "base64 -d" "base32 -d" "xxd -r -p" rev tac; do $c < "$f"; done; tr -d "[:space:]" < "$f"; tr "A-Za-z" "N-ZA-Mn-za-m" < "$f"; } 2>/dev/null | grep -aoE "s3Cur1tY_c7f{[A-Za-z0-9_-]+}|czNDdXIxdFlf[A-Za-z0-9+/=]|Q3VyMXRZX2M3[A-Za-z0-9+/=]|M0N1cjF0WV9j[A-Za-z0-9+/=]|73334375723174595[fF]633766[0-9a-fA-F]" | sed "s|^|$f: |"' _ {}

/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3cxbGxfeTB1X2IzX3RoM19mMXI1N3FxX30=
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3kwdV9tdTU3XzgzX3IzNDExeV85MDBkX30K
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3cxbGxfeTB1X2IzX3RoM19mMXI1N3FxX30=
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3kwdV9tdTU3XzgzX3IzNDExeV85MDBkX30K
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3kwdV9tdTU3XzgzX3IzNDExeV85MDBkX30K
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3cxbGxfeTB1X2IzX3RoM19mMXI1N3FxX30=
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3cxbGxfeTB1X2IzX3RoM19mMXI1N3FxX30=
/home/ctfbot/Downloads/snz/issue15web.pdf: czNDdXIxdFlfYzdme3kwdV9tdTU3XzgzX3IzNDExeV85MDBkX30K
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
/home/ctfbot/Downloads/snz/issue64web.pdf: s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
(timed out after 5s)
reply
czNDdXIxdFlfYzdme3kwdV9tdTU3XzgzX3IzNDExeV85MDBkX30K

I think I found it?

s3Cur1tY_c7f{y0u_mu57_83_r3411y_900d_}

reply

Are there more than 4?

czNDdXIxdFlfYzdme3cxbGxfeTB1X2IzX3RoM19mMXI1N3FxX30=

s3Cur1tY_c7f{w1ll_y0u_b3_th3_f1r57qq_}

reply

No, you found the last one! Congratulations! Very impressive command. Could you explain it? You are definitely nominated for the craziest command haha

reply

Haha, AI-assisted, I confess. But high level it's just walking through the file contents in different encodings

Also, aren't there 5 flags then?

s3Cur1tY_c7f{d1d_y0u_u53_9r3p_0r_pdf1nf0_}
s3Cur1tY_c7f{w45_7h47_57111_700_345y_}
s3Cur1tY_c7f{y0u_mu57_83_r3411y_900d_0r_4_d3v}
s3Cur1tY_c7f{y0u_mu57_83_r3411y_900d_}
s3Cur1tY_c7f{w1ll_y0u_b3_th3_f1r57qq_}

reply

lol, I forgot a flag. I thought I removed s3Cur1tY_c7f{w1ll_y0u_b3_th3_f1r57qq_}.

Where did you find this flag?? hahaha

reply

The last two flags were both found in /home/ctfbot/Downloads/snz/issue15web.pdf

reply
43 sats \ 8 replies \ @ek 29 Aug

Ahh, I see, right. Must have somehow included another flag instead of replacing the existing one.

You’ll get paid for the extra flag! I wasn’t sure anyone would find the base64-encoded flag, so it makes sense to pay extra for it.

1 sat \ 0 replies \ @ek 29 Aug

reply