Writeup: UUT 2019 - Web WarmUp

Information

  • category: Web
  • points: 10

Description

Literally, find the flag!

Writeup

Given the file WarmUp.7z we can extract it with 7z e WarmUp.7z, then we can search the flag as follow :

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
grep -r uut -i
UUTCTF.htm: <title>UUTCTF</title>
UUTCTF.htm: <link rel="shortcut icon" href="http://ctf.uut.ac.ir/themes/core/static/img/favicon.ico" type="image/x-icon">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/bootstrap.css">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/fontawesome-fonts.css" type="text/css">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/fontawesome-all.css" type="text/css">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/font.css" type="text/css">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/jumbotron.css">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/sticky-footer.css">
UUTCTF.htm: <link rel="stylesheet" href="UUTCTF_files/base.css">
UUTCTF.htm: <link rel="stylesheet" type="text/css" href="UUTCTF_files/user.css">
UUTCTF.htm: <script src="UUTCTF_files/promise-polyfill.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/fetch.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/CTFd.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/moment.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/nunjucks.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/socket.js"></script>
UUTCTF.htm: <a href="http://ctf.uut.ac.ir/" class="navbar-brand">
UUTCTF.htm: <img class="img-responsive ctf_logo" src="UUTCTF_files/logo.png" alt="UUTCTF" height="25">
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/notifications">Notifications</a>
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/users">Users</a>
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/teams">Teams</a>
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/scoreboard">Scoreboard</a>
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/challenges">Challenges</a>
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/register">Register</a>
UUTCTF.htm: <a class="nav-link" href="http://ctf.uut.ac.ir/login">Login</a>
UUTCTF.htm: <img class="w-100 mx-auto d-block" style="max-width: 500px;padding: 50px;padding-top: 14vh;" src="UUTCTF_files/logo_002.png">
UUTCTF.htm: <p>A CTF competition for students from <a href="http://uut.ac.ir/">Urmia University of Technology</a></p>
UUTCTF.htm: <a href="http://poscon.ir/"><img src="UUTCTF_files/P0SCon.jpg" style="max-width:10%;max-height:10%"></a>
UUTCTF.htm: <a href="https://offsecresearch.com/"><img src="UUTCTF_files/OFFSEC.jpg" style="max-width:30%;max-height:30%"></a>
UUTCTF.htm: <a href="http://uucert.com/"><img src="UUTCTF_files/UUCERT.jpg" style="max-width:10%;max-height:10%"></a>
UUTCTF.htm: <p style="color:rgba(255, 0, 0, 0.001);">The Flag is: UUTCTF{P0SCon: Welcome to UUTCTF! Happy hacking ;)}</p>
UUTCTF.htm: <small class="text-muted">UUTCTF | Powered by Urmia University of Technology</small>
UUTCTF.htm: <script src="UUTCTF_files/jquery.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/markdown-it.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/bootstrap.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/style.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/utils.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/ezq.js"></script>
UUTCTF.htm: <script src="UUTCTF_files/events.js"></script>

And we can see that there’s the line

The Flag is: UUTCTF{P0SCon: Welcome to UUTCTF! Happy hacking ;)}.

Flag

1
UUTCTF{P0SCon: Welcome to UUTCTF! Happy hacking ;)}