[Computerlab]

Lets chat about the challenges here

[rootme1122]

ok let go!!!!!!!!!!

[Computerlab]

rev challenge Terrorfryer


└─$ strings fryer
/lib64/ld-linux-x86-64.so.2
fgets
setvbuf
stdin
puts
__stack_chk_fail
rand_r
strlen
stdout
__libc_start_main
__cxa_finalize
strchr
printf
strcmp
libc.so.6
GLIBC_2.4
GLIBC_2.2.5
GLIBC_2.34
_ITM_deregisterTMCloneTable
__gmon_start__
_ITM_registerTMCloneTable
PTE1
u3UH
AVAUATUSH
[]A\A]A^
D$H1
D$HdH+
Please enter your recipe for frying:
got:      `%s`
expected: `%s`
Correct recipe - enjoy your meal!
This recipe isn't right
1_n3}f3br9Ty{_6_rHnf01fg_14rlbtB60tuarun0c_tr1y3


is it using little endianess??

[rootme1122]

MiniMax  | Coding

Hidden Content

You must register or login to view this content.

[rootme1122]

i have binary basis

---

I can help for Forensics, Coding, Pwn, and the first reverse. Need some help for the two webs, the two cryptos and the Fryer one for Reverse.

i have binary basis
i can help you
but i also need help

[Computerlab]

what can be done to decrypt 

S0ktzi7JL9AtyM3PzDFIiSktLjIwBAA=

from forensics foggy??

---

in web challenge  WitchWay its related to JWT token
routes/index.js

try {
    const username = getUsernameFromToken(sessionToken);

    if (username === "admin") {
      try {
        const tickets = await db.get_tickets();
        return res.status(200).json({ tickets });

the username can be altered using JWT.io

but the secret key is unknown. How can it be found
utils.js

const jwt = require("jsonwebtoken");

function getUsernameFromToken(token) {
  const secret = "[REDACTED]";

  try {
    const decoded = jwt.verify(token, secret);
    return decoded.username;
  } catch (err) {
    throw new Error("Invalid token: " + err.message);
  }

[Rob1nhood]

what can be done to decrypt 

S0ktzi7JL9AtyM3PzDFIiSktLjIwBAA=

from forensics foggy??

---

in web challenge  WitchWay its related to JWT token
routes/index.js

try {
    const username = getUsernameFromToken(sessionToken);

    if (username === "admin") {
      try {
        const tickets = await db.get_tickets();
        return res.status(200).json({ tickets });

the username can be altered using JWT.io

but the secret key is unknown. How can it be found
utils.js

const jwt = require("jsonwebtoken");

function getUsernameFromToken(token) {
  const secret = "[REDACTED]";

  try {
    const decoded = jwt.verify(token, secret);
    return decoded.username;
  } catch (err) {
    throw new Error("Invalid token: " + err.message);
  }

read the js files when you view source on the site, the secret key is in there.

[Art10n]

what can be done to decrypt 

S0ktzi7JL9AtyM3PzDFIiSktLjIwBAA=

from forensics foggy??

---

in web challenge  WitchWay its related to JWT token
routes/index.js

try {
    const username = getUsernameFromToken(sessionToken);

    if (username === "admin") {
      try {
        const tickets = await db.get_tickets();
        return res.status(200).json({ tickets });

the username can be altered using JWT.io

but the secret key is unknown. How can it be found
utils.js

const jwt = require("jsonwebtoken");

function getUsernameFromToken(token) {
  const secret = "[REDACTED]";

  try {
    const decoded = jwt.verify(token, secret);
    return decoded.username;
  } catch (err) {
    throw new Error("Invalid token: " + err.message);
  }

read the js files when you view source on the site, the secret key is in there.

Thanks, getting the secretkey you can modify the jwt

[Rob1nhood]

what can be done to decrypt 

S0ktzi7JL9AtyM3PzDFIiSktLjIwBAA=

from forensics foggy??

---

in web challenge  WitchWay its related to JWT token
routes/index.js

try {
    const username = getUsernameFromToken(sessionToken);

    if (username === "admin") {
      try {
        const tickets = await db.get_tickets();
        return res.status(200).json({ tickets });

the username can be altered using JWT.io

but the secret key is unknown. How can it be found
utils.js

const jwt = require("jsonwebtoken");

function getUsernameFromToken(token) {
  const secret = "[REDACTED]";

  try {
    const decoded = jwt.verify(token, secret);
    return decoded.username;
  } catch (err) {
    throw new Error("Invalid token: " + err.message);
  }

read the js files when you view source on the site, the secret key is in there.

Thanks, getting the secretkey you can modify the jwt

correct

[Art10n]

I get Foggy Intrusion Forensics