PicoMini-2022

writeups for the 2022 beginner PicoMini

View on GitHub

PW Crack 1

Tags: General Skills, password_cracking
Author: LT ‘syreal’ Jones

Description

Can you crack the password to get the flag?
Download the password checker here and you’ll need the encrypted flag in the same directory too.

Hints

  1. To view the file in the webshell, do: $ nano level1.py
  2. To exit nano, press Ctrl and x and follow the on-screen prompts.
  3. The str_xor function does not need to be reverse engineered for this challenge.

    Approach

    If we take a look at the code, we’ll notice line 19 is if( user_pw == "17ac"): which is checking to see if the password you inputted is “17ac”. If the password you give is “17ac” then it outputs the flag.

    Please enter correct password for flag: 17ac
    Welcome back... your flag, user:
    picoCTF{545h_r1ng1ng_7719ae74}
    

    Flag

    picoCTF{545h_r1ng1ng_7719ae74}