Published on

n00bzCTF 2023 – Crack & Crack

Authors
  • avatar
    Name
    Lumy
    Twitter

Crack & Crack

Just Crack & Crack!

Table of Contents

  1. Source
  2. Solution

Source

The challenge gives us a zip file: flag.zip

Solution

Let's attempt to crack the zip password :

└─$ fcrackzip -v -u -D -p /usr/share/wordlists/rockyou.txt flag.zip
found file 'flag.pdf', (size cp/uc 159862/161498, flags 9, chk 16bc)
checking pw 1nk5lave0844

PASSWORD FOUND!!!!: pw == 1337h4x0r

After extracting the zip file with the recovered password, we can get a pdf file that is also password protected.

Here we go again, let's attempt to crack the pdf password

└─$ pdfcrack -f flag.pdf -w /usr/share/wordlists/rockyou.txt
PDF version 1.5
Security Handler: Standard
V: 2
R: 3
P: -3904
Length: 128
Encrypted Metadata: True
FileID: 3ac35b37fdbe79c0efcd2074d254feec
U: 7046f3323934ab6c310e0f7edae1de0400000000000000000000000000000000
O: 9ccbdd5b3bcac3e7e2a53e3cf13b34b8008d6b9d8538b18583e6557227e73c9c
Average Speed: 60270.1 w/s. Current Word: 'tracy37'
Average Speed: 60815.1 w/s. Current Word: '076212558'
Average Speed: 61092.4 w/s. Current Word: 'sokker17'
Average Speed: 60733.4 w/s. Current Word: 'ozepq07'
found user-password: 'noobmaster'

Reading the PDF file with the gathered password shows us the flag

Flag : n00bz{CR4CK3D_4ND_CR4CK3D_1a4d2e5f}