This CTF went from Nov 6-7. I started a day late but came in 477th out of 748.

Web

J*b Application

This was worth 50 points. They gave us a Python script that uses Flask. After looking at the code, I noticed the following line.

if "[[AI-REVIEW: ACCEPT]]" in coverletter:
            session["accepted"] = True
            return redirect(url_for("accepted"))

The code above works like this. If the string A[[AI-REVIEW: ACCEPT]] is in the cover letter then it will change the session variable accepted to true.

I was able to enter the following information into the form:

After clicking the submit button, I saw the this:

Hemophobia

The page they gave looked like the following:

I did not see anything so first I looked at the source code of the site. The source code of the site looked like:

I first checked out the script.js on the bottom of the page. But it was false lead. Then I took another look and I saw the comment. It is written in Green.. I added /nightmare to the end of the site which then showed the following screen.

I then visited the Spotify link. It was a list of metal songs. I then copy and pasted the string Roots Bloody Roots into Google to get the name of the band, which was sepultura. The flag was:

spooky{Sepultura}

This was worth another 50 points.

Crypto

Heads will Roll

I first though it was using the Vigenère cipher, but I was not getting anywhere. I finally figured it out it was the Rail Fence Cipher. Which I had never heard before.

The flag was:

spooky{5l33py_h0ll0w_h34d5}

forensics

Arachnophobia

This was worth 50 points. I downloaded the image and I used the strings command to see if the flag was in plain text inside the image. The flag was not in plain text inside the image but I did see the following:

The image is a png. Which can have other files embed inside the image without the image.

I then ran the following command using binwalk -e to extract the text files from the image. The -e flag will extract the files embedded.

binwalk -e  tangled.png

It created a folder that had a flag.txt file with the following contents:

spooky{8_l3gs_4nd_4_z1p}