oracle-srl

Catégorie: Crytpo Difficulté: Difficile Flag: CTF{e663b007e3d1fd27f657e2756e3ba8724a37119d145063ce541595988b6cdc72}

Challenge

19MB

source-oracle-srl.zip

archive

Ouvrir

Description

---

[ 5 aug 2024 ] Just finished my ecommerce website. It took quite a lot of time because I wanted to make sure it's extra secure, I'm sure it will get some traction. I'm so excited!

[ 20 aug 2024 ] The website isn't picking up as i hoped it would, but I'm still optimistic

[ 13 sep 2024 ] The store is a complete bust and there is this annoying customer that keeps on checking my store every other damn minute but doesn't buy anything.

[ 13 sep 2024 ] JUST BUY SOMETHING!

Flag format: CTF{sha256}

Ce challenge tourne sur un docker et n'est pas disponible

Solution

Les sources du challenge étaient mal fait et le code source intacte était donné, on pouvait trouver le flag directement dans le fichier Oracle-SRL\client\client.go.

func CheckProducts() {
    browser := rod.New().MustConnect()
    defer browser.MustClose()
    
    flag_owner_session_token, err := session.GenerateSessionToken("[email protected]", "CTF{e663b007e3d1fd27f657e2756e3ba8724a37119d145063ce541595988b6cdc72}", controllers.Key)
    if err != nil {
        panic(err)
    }
// ...

Bien joué les gars...