In this challenge the main clue is that “innitit”.
Search the keyword in the twitter. And will get a twitter account named to that . And it was tweeted a github repo.
Following the github repo we will see 3 strings listed.
The string starting with the Qm is the hash of the file in IPFS. With that in mind can download the file using IPFS with command
ipfs get Qm..
While opening the file anyone will notice it is encrypted .
So that means it required a private key to decrypt it .and there is no more clue in the README.md . So taking a look at the other files and folders we will get a public key. That was located in /assets/Application/id_rsa.pub
This is the one of the weak encryption .Using the RsaCtfTool we can decrypt the encryption with help of public key.
So there is three files and the order to post the flag was given, domectf{1+2+3}. Flag will be domectf{qOs5xbxFaKkHtr6foM1MTUEX6E0zUGqQ}
The 12th edition of c0c0n, a cybersecurity conference organised by Conglomerate of Government and the Industry, led by ISRA, The Society for the Po...
c0c0n is an annual international cybersecurity, data privacy and hacking conference organised by the International public-private partnership led b...
Category: Web Flag: Write your team name in /tmp/DOMECTF_BASE Points: 250 bonus + 1 point for 5 minutes of securing flag.