Run build.sh to build the docker image and run the container.
- Open your web browser and go to http://localhost.
- Inspect the HTML source of the main page to find the commented out /forgot_password endpoint.
- The endpoint /forgot_password gives the hint for the username and password
- Access the endpoint /forgot_password to get the hint for the username and password.
- Use the credentials to login through the main portal.
- Note that all messages are encrypted and require a key for decryption.
- A hint on the messages page suggests that "all things come in 3s."
- On the login page, look for a stream where every 3rd letter is part of the decryption key.
- Similarly, on the login page, find another stream where every 3rd letter is part of the flag.
- Use the key found in step 8 to decrypt the messages and obtain another flag.
- Log in to the SSH server using the stolen credentials:
ssh -p 8080 spartan@localhost - List hidden files:
ls -a - Get the contents of the hidden flag:
cat .flag.txt - Mount the disk image:
mount /home/spartan/disk.img /mnt - Get the hidden flag from the mounted disk:
cat /mnt/hidden_flag.txt
The UNSC has been working on a new communication system to help keep their data secure.
They have a weird stream of data on the main page, can you find the flag?
Challenge Courtesy of <a href="https://github.com/BC-SECURITY" target="_blank">BC-Security!</a>flag{c533655a69aebaecd2340d54fe599682}
There seems to be more than one stream of data on the main page.
See if you can retrieve that, it might come in handy!
Login to the system and decrypt the data to find the flag.
Challenge Courtesy of <a href="https://github.com/BC-SECURITY" target="_blank">BC-Security!</a>flag{babc9b8b4405d67cf28d58fe56ef96ccg}
The host is multiplexing HTTP and SSH on the same port.
Can you ssh into the system and find the flag?
Challenge Courtesy of <a href="https://github.com/BC-SECURITY" target="_blank">BC-Security!</a>flag{bf9a8f4e145af53efb74c079327d90a5}
Find the last flag in the system.
Challenge Courtesy of <a href="https://github.com/BC-SECURITY" target="_blank">BC-Security!</a>flag{5007e994724962398cb5634b8bbbdbf2}