PentestHub India CTF-2020 Solutions

CTF URL:

https://tenutomedicine.htmlpasta.com/

Way 1:

First lets go to the page src code and see we get a pastebin link

Lets go the link and see the src code carefully

There you go our secret UlU5Q1JDNDNhV2R4TkRzeGFXdGlOVEZwWWs5UE1EczZOREZT

As many people couldnt solve it ..a hint was released ..it was 2 * (70-6)

It means 2 times base64 ...after decoding it with base64 for 2 times we get something like this

EOBD.7igq4;1ikb51ibOO0;:41R

After doing some research on google we find a hint that its XOR encoded i.e.

'E' ^ 'F' = 0x03

So here i used a bit of python to decrypt the flag

Code:

text1 = 'EOBD.7igq4;1ikb51ibOO0;:41R'

for i in text1: text1 = text1 + chr(ord(i) ^ 3)
    
print(text1)

We can clearly see the flag i.e. FLAG-4jdr782jha62jaLL38972Q

Thats it.

Way 2:

Most of you has seen this image and the link posted in facebook:

Alternative link: (that link became void)

https://drive.google.com/file/d/1uYhkeNirbfoNUC2Wtd3STnCHC5C2uUZK/view

Download that image and crack it with stegcrack

https://github.com/Paradoxis/StegCracker

See the string RU9CRC43aWdxNDsxaWtiNTFpYk9PMDs6NDFS

Decode it with base64 and again we get the samething as above in WAY 1: i.e. EOBD.7igq4;1ikb51ibOO0;:41R

Again follow the same steps in Way 1 and get the flag

FLAG-4jdr782jha62jaLL38972Q

Winners:

1. Pratyaksha

2. Samit Hota

3. Sukalyan Mukherjee

4. Deadshot Hacker has been banned due to leaking solution during the challenge hours

5. Ranjith Geeks

Attempters:

1. elli0t43

2. Binit Ghimire

3. Pranav pandya

4. Mr. Rc

5. EPIC Hacker has been banned due to leaking solution during the challenge hours

6. Mani Kumar

7. Sid Joshi

8. Dibyo Dey

A big thanks to all 🎊🎊🎊 🎉🎉🎉🎉winners and attempters🎉🎉🎉🎉 🎊🎊🎊 for doing the CTF!

Keep learning and go on 👨‍💻

Happy Hacking!!