Kita diberi sebuah file Misc75.zip, isinya adalah 40 file, masing-masing dengan nama berupa string heksadesimal seperti ini:
02e74f10e0327ad868d138f2b4fdd6f0
1679091c5a880faf6fb5e6087eb1b2dc
182be0c5cdcd5072bb1864cdee4d3d6e
19ca14e7ea6328a42e0eb13d585e4c22
1c383cd30b7c298ab50293adfecb7b18
1f0e3dad99908345f7439f8ffabdffc4
1ff1de774005f8da13f42943881c655f
33e75ff09dd601bbe69f351039152189
34173cb38f07f89ddbebc2ac9128303f
37693cfc748049e45d87b8c7d8b9aacd
3c59dc048e8850243be8079a5c74d079
45c48cce2e2d7fbdea1afc51c7c6ad26
4e732ced3463d06de0ca9a15b6153677
6364d3f0f495b6ab9dcf8d3b5c6e0b01
6512bd43d9caa6e02c990b0a82652dca
6ea9ab1baa0efb9e19094440c317e21b
6f4922f45568161a8cdf4ad2299f6d23
70efdf2ec9b086079795c442636b55fb
8e296a067a37563370ded05f5a3bf3ec
8f14e45fceea167a5a36dedd4bea2543
98f13708210194c475687be6106a3b84
9bf31c7ff062936a96d3c8bd1f8f2ff3
a5771bce93e200c36f7cd9dfd0e5deaa
a5bfc9e07964f8dddeb95fc584cd965d
a87ff679a2f3e71d9181a67b7542122c
aab3238922bcc25a6f606eb525ffdc56
b6d767d2f8ed5d21a44b0e5886680cb9
c16a5320fa475530d9583c34fd356ef5
c20ad4d76fe97759aa27a0c99bff6710
c4ca4238a0b923820dcc509a6f75849b
c51ce410c124a10e0db5e4b97fc2af39
c74d97b01eae257e44aa9d5bade97baf
c81e728d9d4c2f636f067f89cc14862c
c9f0f895fb98ab9159f51fd0297e236d
cfcd208495d565ef66e7dff9f98764da
d3d9446802a44259755d38e6d163e820
d67d8ab4f4c10bf22aa353e27879133c
e369853df766fa44e1ed0ff613f563bd
e4da3b7fbbce2345d7772b0674a318d5
eccbc87e4b5ce2fe28308fd9f2a7baf3
Di dalam masing-masing file ada dua digit heksadesimal. Setelah mencoba-coba menggunakan md5 cracker online, ternyata masing-masing adalah angka (c4ca4238a0b923820dcc509a6f75849b adalah md5 untuk angka 1, dst). Jadi langkah pertama yang saya lakukan adalah merename semua hash menjadi nomor, ini bisa dilakukan dengan skrip bash:
for((i=0; i < 40; i++)); do mv $(echo -n $i|md5sum| cut -f 1 -d' ') $i;done
Berikutnya kita coba gabungkan semua isi file sesuai urutannya:
for((i=0; i < 40; i++)); do cat $i; done
Hasilnya:
50776e69756d7b30326365663765656237356664643964666336376330646331653365323535627d
Berikutnya kita coba convert ke ASCII, dan ternyata kita dapat flagnya:
$ echo 50776e69756d7b30326365663765656237356664643964666336376330646331653365323535627d| xxd -r -p
Pwnium{02cef7eeb75fdd9dfc67c0dc1e3e255b}
Makasih Pak Yohanes udah meluangkan waktu untuk share writeup menambah wawasan dan bahan pelajaran.
ReplyDeleteMakasih
The adorable coronary heart toy provides a fun approach to play with temperature; find a way to|you possibly can} pop it within the fridge to cool it down, however if you bend the center, it warms up. I spoke to the founding father of the super-inclusive sexual wellness model to seek out|to search out} out why it’s essential on your vibrator to have a backstory. “I truthfully don’t suppose it has something to do with the standard, or lack thereof, of a sex toy. Small manufacturers are much less likely to make use of this terminology.” In the second part I interview manufacturers and dig deeper. Bianca Alba, MPH, is a sex toy store nonbinary sexual well being educator, coach, and journalist primarily based in Las Vegas.
ReplyDelete