Character

Catégorie: Misc Difficulté: very-easy Flag: HTB{tH15_1s_4_r3aLly_l0nG_fL4g_i_h0p3_f0r_y0Ur_s4k3_tH4t_y0U_sCr1pTEd_tH1s_oR_els3_iT_t0oK_qU1t3_l0ng!!}

Challenge

Description

---

Security through Induced Boredom is a personal favourite approach of mine. Not as exciting as something like The Fray, but I love making it as tedious as possible to see my secrets, so you can only get one character at a time!

Ce challenge tourne sur un docker, disponible sur Github

Explications

Il suffit de se connecter en TCP sur le port et d’envoyer le numéro de la lettre du flag que nous voulons pour la récupérer.

Vu la longueur du flag, une automatisation s’impose

---

Script de résolution

from pwnlib.tubes.remote import remote

def solve(host, port):
    client = remote(host, port)
    client.recvuntil(b'Enter an index: ')
    flag = ''
    while not flag.endswith('}'):
        client.sendline(f'{len(flag)}'.encode())
        data = client.recvuntil(b'Enter an index: ')
        flag += data.decode().splitlines()[0].split(': ')[1].strip()
    print(f'Flag: {flag}')

if __name__ == '__main__':
    solve('94.237.60.39', 44111)