The Challenge

This replicated CTF (Capture the Flag) Event/Portal is a virtual battleground where cybersecurity enthusiasts test their skills in simulated challenges. Participants engage in tasks spanning cryptography, reverse engineering, web exploitation, and forensics, aiming to capture digital flags as evidence of success. With its global reach and inclusive design, the platform fosters collaboration and learning among participants of all skill levels, enriching the cybersecurity community worldwide.

Challenge	Description	Access Point
Flag Formats	All validation strings aka flags will follow a specific format. These are what you are after! An example: Insomnia{Anything_Can_Be_Here} / Professor{Anything_Can_Be_Here}	Professor{I_Understand_The_Flag_Formats_Now}
The Bank	There is a secret flag in this page can you find it? With most web browsers you can right click and from those options you can pick “inspect”. This will then bring up many tabs. Some of the ones we use often include: source, network, and application. By default, after you have inspected, you will be looking at the source code of the website. Sometimes you can find left open contents within it. In HTML code you can use <!-- COMMENTS --> which are still in the source, just not displayed on the page. Did you inspect the THIS page and get the flag?	https://pensecure.pro/intro-101/
The Lobby	By using the “Bank” page, we have gained access to a camera in the bank lobby and are reviewing its contents. If we could get some sort of live feed, that would be really great! Use the webpage to get us into the system. As always, start your enumeration process by checking the /robots.txt file. A thorough reference to the robots.txt file can be found in the Intro section. This is a fast method of indexing all possible pages on a website. These pages occasionally leak information. For now, simply access this CTF portal’s robots.txt file to retrieve your flag!	https://pensecure.pro/
The Leak	We have footage on the lobby and now we need to plan some kind of entrance strategy. Hopefully the website has some kind of data leak and we can find the employee credentials. If we can, grab those up, then bring those back to Insomnia so she can get with BOOM who then will take them to Bingo who knows BANG via the Onion . Then we can get those employee uniforms and make our way right into the front door! They will never even expect it! 😈😈😈 Those sitemaps should for sure come in handy here…	https://fakebank.1337raptors.tech/wp-sitemap.xml
Steg 4 Fun Locked Page	So you were able to get the employee credentials. Now you can get those uniforms and make your way via the front door, so thats covered. Due to the data leak you discovered, we have inside access to that private page. You should now have a picture that has data embeded into it. You can use tactics that are present on the Intro page. The article located here: https://systemweakness.com/steganography-crack-password-protected-message-2d91830ba90c will be helpful in moving forward. However, we have given you the password to extract the data so you don’t need to crack it. Password: VaultBreaker123$ You can use the tool steghide; https://systemweakness.com/steghide-a-beginners-tutorial-35ec0ea90446, to extract the data. Hurry up! Get that live feed! Then we can have eyes everywhere in the bank! If we can hijack the network we may be able to use that to crack the locking mechanisms on the vaults.	https://fakebank.1337raptors.tech/wp-sitemap.xml
Check the Log File	We got the live feed! Now we can see EVERYWHERE! The live feed had a log file associated with it. If we can find that 200 request, we should be able to get the flag and admin privileges to a system component. The file below is a real apache2 log file. The data inside wont be as plaintext as you may be hoping. You for sure should use Cyber Chef which is in the Intro section. Cyber Chef is always helpful when trying to decode or convert data.	https://pensecure.pro/wp-content/uploads/2024/05/log.txt
SSH or DIE	BANG! We got the admin credentials from that log file. User: bankmanager Pass: F4k3B4nK153@! With that information we can ssh into the bank locking component. Once we have that, everything will be ready for us to make our way into the bank via those employee uniforms Insomnia got for everyone. The ssh protocol is a secure shell that allows for remote CLI interface to host. Once you have access to a machine or host via ssh, you have all the capabailities that also reside on that machine. If I ssh to a Kali Box then I have full access to the Kali tool set. I can ssh right from my cmd terminal on my windows host. So therefore, I can bring the whole Kali tool set right to my Windows Machine via a CLI ssh connection. For this challenge, you can use the command below to create that connection as long as you have some sort of ssh tool on your box. Again, newer Windows machines have it present by default. Just open a cmd prompt and type ssh and see if the program is found. If it is not, you can install it from here; https://github.com/PowerShell/Win32-OpenSSH/releases. Which is also present on the Intro page if needed. With the tool installed run… ssh bankmanager@66.11.105.128 -p41131 You will then be connected to the instance. This instance is a Linux box so you may want to make reference to this cheat sheet: https://cheatography.com/davechild/cheat-sheets/linux-command-line/. As always, I am sure there are a few files that you may find to be “juicy” and worth reviewing! Since this is a no gun heist, we have to make sure everything is properly executed before we step into that Bank!	ssh bankmanager@66.11.105.128 -p41131 User: bankmanager / Pass: F4k3B4nK153@!
Lock 1	You and the team are setup and YOU are designated as the Lock Interpreter. You walk up to the first section of the Master Vault and you inspect it. Very closely you look and you see what appears to be an encoding! Let us use our trusty tool (Cyber Chef) and see if we can get any data out of it?	\x49\x4e\x53\x4f\x4d\x4e\x49\x41\x7b \x4c\x30\x43\x6b\x31\x5f\x56\x61\x55\x6c \x74\x5f\x43\x30\x44\x33\x7d
Lock 2	Whewwww eeeee! Talk about pressure huh?!? You got the first one done! You slowly make your way around to the second part of the locking mechanism of the Master Vault. You see another encoding! But its for sure not the same… “If we have to say Cyber Chef :wink: :wink:, somebody is going to regret it!” That what somebody yelled out as you were inspecting the vault LoL. Have you checked what capabilities Cyber Chef may have regarding Brute Forcing?	VAFBZAVN{Oe3NxvAt_I@Hyg$}
Lock 3	You know the drill! Get over to the 3 mechnsium! 2/5 so were getting close! Take the below and make it 3/5! Letssss gooooo!	49:4e:53:4f:4d:4e:49:41:7b:24:75 :70:45:72:5f:53:33:63:72:65:54:5f:56:61:55:6c:54:7d
Lock 4	Almost there! I can smell money through the door! Time to get paid! You cant always rely on Cyber Chef even through it gets a 10/10 for AWESOMENESS! Check the Intro page and see if there was maybe another resource that could be helpful here…	Ro<:h2g0s4:/5kHSc5!<{&vHBP(/{l4jz]AbAkuoBW
Lock 5	If I was a super hero I would be named Thor which also rhymes with… Get in the vault!	eH1Ufn5JeHJ8eXNkemxTWQBYc1JJWk4=
The Vault	We made our way inside the Vault! But WAIT! What is that little box over there?! Nobody had intel on that! Whatever it is, it sure does look like it may be from another planet?! That must be why the security was so tight in here! I don’t know about you, but I want whatever is in that box! Was there something we missed? I wonder if those flags from Intro 101 should be analyzed? Once you have the proper code to unlock the Bank Vault you can do so here Vault Access But remember the security system will notice wrong attempts and we dont want any extra trouble. We have to do this carefully if we want the contents of that box! The Flag in this challenge is the code that was needed to get the INSOMNIA{} flag. So if your code was 323425 then you would wrap your flag like so INSOMNIA{32342555} then submit that.	https://vaultaccess.hackhackhack.me

Professor{Check_ALL_Sources_ALWAYS!}