> For the complete documentation index, see [llms.txt](https://blog.ycfteam.in/yctf-weekly/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blog.ycfteam.in/yctf-weekly/writeups/yctf0x02.md).

# 🚩YCTF0x02

## 1. Easy

**Category:** Reverse Engineering

**Description:** Dude, It's an easy challenge.

**Challenge file: \<link>**

**Credit:** [**Munazir**](https://blog.ycfteam.in/yctf-weekly/)

Solution: Executing the binary on linux asks for the password.

<figure><img src="/files/PYpScKt56pYCn9LkpjOh" alt=""><figcaption></figcaption></figure>

Now, use strings to get the exact matching pattern for passphrase.

<figure><img src="/files/7SnXWW5F0qa3EySMgPfJ" alt=""><figcaption></figcaption></figure>

We got some strange string `4/*A1zqi!*9` before the Passphrase, let's try to enter the string when asked for the password.

<figure><img src="/files/2qTQ1abm3qPCwlfrctBA" alt=""><figcaption></figcaption></figure>

After we enter the passphrase, we get something in HEX format.&#x20;

`594354467b336173795f7233765f643065736e315f723371753172335f627261316e7d`

Pasting on cyberchef, we get the actual flag.

<figure><img src="/files/9zg5nqXbmDF4FjShx6RA" alt=""><figcaption></figcaption></figure>

## 2. Never found

**Category:** Miscellaneus

**Description:** My friend is spying on our ycfteam website. But the page he was trying to access was never found later.

**Link:** [**https://ycfteam.in**](https://ycfteam.in)

**Credit:** [**Munazir**](https://blog.ycfteam.in/yctf-weekly/)

**Hint:**&#x20;

**Solution: Understand the challenge name and description, what does it say?**&#x20;

**`Never found` Which indicated/ similar to Not found. searching the Archive web for the 404 not found page on `https://ycfteam.in/404`,**&#x20;

<figure><img src="/files/cyHO4pcNJgLnVRFpQqhn" alt=""><figcaption></figcaption></figure>

**We get the flag!**

<figure><img src="/files/Xr5UzzMhDAZ04y6N9DUn" alt=""><figcaption></figcaption></figure>

## 3. Cookie&#x20;

**Description:** Well, there is only one way to survive.

**Link:** [**https://cookiechallenge.pythonanywhere.com/**](https://cookiechallenge.pythonanywhere.com/)

**Credit:** [**Munazir**](https://blog.ycfteam.in/yctf-weekly/)

**Solution:** Visiting the URL, we get the following page to enter the name. Some of you might think it is vulnerable to XSS. But hold on!

<figure><img src="/files/NWWcP3lxOpCYIoNSV8kf" alt=""><figcaption></figcaption></figure>

Directory bruteforcing will lead to the following result which reveals `/cookie` and `/robots.txt`

<figure><img src="/files/OuPPgnSE2n5u57HF6U0O" alt=""><figcaption></figcaption></figure>

Visiting the robots.txt, we get another directory `/sup3r_s3cr3t_d1r`

<figure><img src="/files/3hwaQ40h3vv6fH6AK4E7" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/HHxPEs8oCYzBquQEpLhq" alt=""><figcaption></figcaption></figure>

Visiting `/cookie` directory to get the cookie, and we get the JWT token.&#x20;

<figure><img src="/files/7oI9NjgNiTv6inVoNwet" alt=""><figcaption></figcaption></figure>

Take the token and paste it on <https://token.dev> change the values as admin: true and answer: yes

<figure><img src="/files/nw6MRVtC5aPpeFd2bUg0" alt=""><figcaption></figcaption></figure>

Now visit the `/cookie` again and change the cookie and refresh the page.

<figure><img src="/files/WBNS7y72ARpUMQ4qOkW3" alt=""><figcaption></figcaption></figure>

Then visit the `/sup3r_s3cr3t_d1r` again to get the flag!!!!

<figure><img src="/files/A0DQGnpmb8jOXLullAWD" alt=""><figcaption></figcaption></figure>

## 4. IE10.1

**Description:** Don't run away from problems; facing and solving them is the key to success.

**Link**: <http://yctfinternet.liveblog365.com/>

**Credit:** Gourav Suram

**Writeup link:** [**https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security**](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security)&#x20;

## 5. Confluence

**Description:** Help my friend to download the flag.

**Link:** [**http://139.59.45.27:8090/admin/flag.tar.gz**](http://139.59.45.27:8090/admin/flag.tar.gz)

**Credit:** [**Munazir**](https://blog.ycfteam.in/yctf-weekly/)

**Writeup credit:** Gourav Suram

**Writeup link:** [**https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security/confluence**](https://heapbytes.gitbook.io/notes/ctf-writeups/2023-ctfs/yctf-week-2-9-dec-23/web-security/confluence)

## 6. VM Writeup