Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/bc-security/red-team-village-ctf-2023

Secure Terminal CTF Challenge for DC31 Red Team Village
https://github.com/bc-security/red-team-village-ctf-2023

Last synced: 5 days ago
JSON representation

Secure Terminal CTF Challenge for DC31 Red Team Village

Awesome Lists containing this project

README

        

# Secure Terminal

## Challenge Host: http://secureterm.pwn.site:80/

## Screenshots:
![](img/sc1.png)

## Build and Run
`sudo ./build.sh`

### FAQ
- What do I do if I receive this error `WARNING: Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by 'NewConnectionError(': Failed to establish a new connection: [Errno -3] Temporary failure in name resolution')': /simple/flask/`?
- Run `sudo service docker restart`

## Secure Terminal
### Category: Secure Terminal
### Value: 20
### Description
```
- Initiating Connection....

- Please Connect to : secureterm.pwn.site:8045

Challenge Courtesy of BC-Security!
```

### Flag
`flag{584d0218c9c70bfebb5416967f5a35a1}`

### Solution
1. Once the server is running, open your web browser and navigate to http://localhost:8045/.
2. You will be presented with the landing page of the Missile Terminal
3. The menus give error messages that are hints to the login password and login page.
4. Using the hints, you can figure out the correct login password is `pipboy4life`.
5. Once logged in, you can access the Secure Terminal, which allows bash commands in the data folder.
6. Type `ls -a security` to see that there is a hidden launch key file.
7. Use `cat security/.launch_key` to get the password.
8. Return to the Missile Control page and type 4 to find the hidden control menu.
9. Select enter launch key and type in `Death is a preferable alternative to communism`.
10. The flag will be displayed on the screen: flag{584d0218c9c70bfebb5416967f5a35a1}.