From 53d93debfb135faae1844f747c7c7bb7e0db664a Mon Sep 17 00:00:00 2001 From: agatha Date: Fri, 24 Nov 2023 13:02:22 -0500 Subject: [PATCH] Add rev1 --- rev/password-recovery/README.md | 1 + rev/password-recovery/app | Bin 0 -> 16336 bytes 2 files changed, 1 insertion(+) create mode 100644 rev/password-recovery/README.md create mode 100644 rev/password-recovery/app diff --git a/rev/password-recovery/README.md b/rev/password-recovery/README.md new file mode 100644 index 0000000..bfac011 --- /dev/null +++ b/rev/password-recovery/README.md @@ -0,0 +1 @@ +Our infra admin "LosCapitan" stores all of his passwords in a self-hosted password manager. Shortly before the CTF, he forgot his password and now he can't access his passwords anymore. The keys to the underlying server are stored in the password manager as well. Luckily, he never changed his password and we still have the old password checker for one of our servers. Can you help us recover his password for the "LosCapitan" user? Wrap the correct password in gctf{}. Flag format is gctf{.*}. \ No newline at end of file diff --git a/rev/password-recovery/app b/rev/password-recovery/app new file mode 100644 index 0000000000000000000000000000000000000000..ade260b1bdedc291c7a00c24697259fe2988ed10 GIT binary patch literal 16336 zcmeHOeQ;b=6~CJ_Z3=CZ&{j%OvLFEpX4|ys7aF^5lk~;uN9>2djOAsM-83u7?z;OH zQbaApFxd$igJYq8@JDfm0Y@1+;4oAj+)$)NKBm+jrm&dbYl zBkDN*(E|OKoRP;qudPFYOxw_@KDanA*NzSEZH4qyTfcJbb{LxD*2@F z=~&14^wJfOQ4#93>tZ`EZM4mlP-=t9uGg&Sf6`tn+l7PLjq*}yN2s*-dDu~2{?#I< zc_+6w(|Jg7{)KXS)$;Cm`fCK+0(L!h{VIA~05*}g}? zO`b4LqbfOI^Wu+Wi&#$jpLzMY^K%c(t$v^>et%2bz16E<$X`!76gSzB4i)kzLxgy$ zpO1rd?0npgnvD@X6??IV=uG7j2reihyc<}s2u|%3)4y;AoMI}bzhMTPdRa{WVcnVpe%x5`-Q?pOjiPJagp)0Wv2 zi4)S%8!%AsD?_WD`l@bc$N!iM7hhyG;lj_Ga-$|) zI9)eV9%7sx7jn&#?1&4e>ru)RE?hrHSde$&)CVaiTsS|HwCJP@M}qz0XTZ;Zp8-Du zeg^yu_!;=0XW&m2m;BY}d!yVKEc?}RrHuZ(RZ=)<^gUgEOvh4Kod#T}vG7|_9af~@ zMUwF|g+ifoSo1V-8~^zfPZPHBr>1zCV2wXI#nZ%U{5w-TO{m7d*ds~-NPX?)$AExA)S8o4t@-|r?`cQ@7L>z*}+8m>gQ3X30u z>bsqxit2A5NF->eVH}7tRCb2Q`bldsQg;v4k-E8s(TeH=q<4%d^p9%&)sGTccFxF6 z7$a|OFh(XzjleU;sdLsMIEb->^1`UyZ?UKR9%#rytg_eaG5Q)dQPs%3X3aAO8=Aq4 zJ$tTD7>go%&y;NgAJ_|9r+u;?zXd|7?17z;`|6}I*feR3jLtXeKy`hrYN|e3CiT6? z9IL^yGx$fs$Q>Vh49<*P*)ND4EPEbgN^O^M`x{RnzNj%ctL7>lXwz6-9@#pCw+&d6 zP>o%Oh>fBCl=k!tq<6WcH)v_uSKL^Q#+r^8Ia1&27F|uE$%@C-K>v*0xF8b3vW4Qjq`bdHgG3LQ>- z3RvKzk?U`p77`ihU@KukB7|KB0}f9+F#;zBDyPDmGC8^fE#*$U_j>2ZSb2W3Gagy^A4Y4gy>Cb1Y(DOmOv=Q{~2Zh2PD*)Wiz;6NQ(`*dx8H*a%EYjo6DjRzp z0%LIRU*1WH$%_-;%C6mfS&~{)rTl=}uyp;^t1j1{{m7oadp!g_ZAiK( zgj+Zc18)PBLT%lJ;}qIkLtxW_$~#Lo&!63cfWVUc`#Amp`IVrK{6=!=+eg^yu_!;ms;AgVNLw`t=&tuSg%c`>JsJ`GZn&SYM9r-$=beQR^V>v_ep|iohg+`UR)<@>DDnXap$#` zQnIE_+NbrdR74LShjjmtR}JCgq2|Z9qxc>ra&3p#IL*Jv^7omSerTot;*YHJ_PSib z=R3@_m1!H(6w?Dtz4jl)%X-YU3vJC;^KU=-@T+SVZrQx~+Tc}t+Or8O8?0LyS`}JR zTbI>r-Pcxvt6#?OKW~A?@ho*#f8um&()psbsdsTggDj*lis{q&EWs+)6}+yL)m4!3 zHV?jvak-vEzXg?mTB?F!86pMeR zem$)HEK=5`;$eyw^YbIEf1&b@m#4MaLT6pQc=@H)U*cSMg1?DMvGvsFAt6Cga?!gr zj=N0Q1)_Qd@M3<}0JrUzLc&UDfLiJ|s3>wEM00qZxjfBl~nS(X&f+eN@Bey^Vz;6bwUlnvTX zr5fjW^nYg1X#swjN0-6hRs=Dknt>PTC4p(NJ2N801271^f%WUOpwXQ)F>t&2CU z9|S@ z>P+KbPcxeB>Ddnx7iU7#nx+~_r4Wv3Ht*cHt;uZK-e_Vue&Y?>H*Ra$3>dpM%qD}S zM&nLpZrQqH)5fjlj^^fFO}owA8#irjf`xZ`L0C2le8ffo+O**4(gp(TP_VE+AQp{S z5p`1x@l)@38^bhB?^Xv#SkIdo9Dw{HxA181IN)s!9{Kbg31&2tG`k{+DD75g*#X07 zJYi-tv8YPKdMz^zk%|9|vlMJ13jghy47=z374DrBPFriCiLDTlY1$)EbmK#BGHqtM z;++=s-5WI=N4isVI+Y4#_V-wkc2FyA(=MrDQ%5YFQlUiBiiP$ivY}KunTn;Y{Vu3I z8^^Aoc$A@yn_6mVv}*OPNTy4LqWcqQ!lqW*mfRdmXX44kG{%H19qW#e0oPL9mI~=G zL#T%KCBaf96YEeR3z<|QeS$;jq(0@LSQii2t|+_-XZx^6u5BT8G!^NI!KACT_SnEoi=qGW|98c_L+Q&w^ROESLb4tb1WP_1_-uNYeAyg=*VlVT2p?Ox6_PzbTm+d#Pp1d~*9d_AMU%dAB1EZXXf9E;H&ntPK zVmCTgsS~{qhuc2Lc0yBbWz<>h&<8#C!>k}w^u>+vLXUXt53@jMn;0?`JE2EC_A<{9 z`ikepN9@GyPdxTAUlS_ttD^6{etydKa{g72HJS2jBZKx>aTruyz(M&J`*08piqJ-z zb$-3=zYK}nejsS83Y~B)?TU;afnP&q0S-x%?30uIr(S*Gg`S0Nh09*v(+|}GL=iok zo8krk5CR&z(!RVO$bMqkH%!+b6|s}^_&s3Mf3cVM^x@^Ct@QptyJr82z0lb(cH65k zYp<|rkXa#OC;U7Z6DI8k!?q;I_FjEz%U!CteO7lwVt