RSS
 

Hackvent 2019: Day 4

05 Dec 2019
CTF: Hackvent 2019
Link to challenge: https://academy.hacking-lab.com
Date Completed: 4 December 2019

 

Challenge

HV19.04 password policy circumvention

File mirror: HV19-PPC.zip

Solution

We download this zip file and extract it to find a HV19-PPC.ahk  file. We know that ahk files are AutoHotKey files. Upon inspecting the ahk file we find that this is in fact the case.

The script seems to move the cursor around and type text when certain characters are typed in.
As the script and hint suggests, we have to type in merry christmas geeks letter by letter and let the script mutate the string.

Doing so gives us our flag!

Flag:  HV19{R3memb3r, rem3mber - the 24th 0f December}

 
No Comments

Posted in Hackvent 2019

 

Leave a Reply