Skip to content

Latest commit

 

History

History
46 lines (26 loc) · 1.23 KB

challenge.md

File metadata and controls

46 lines (26 loc) · 1.23 KB
Raw

chocolate crack

  • Published: 04/05/2024 (#3/14 in round)
  • Category: PWD Cracking
  • Points: 50
  • Author: Kshau

i love chocolate crack dont u? Wrap the password in csd{}.

TIP: Popular wordlists may not work.

Attachments

  • $1$CSDCTF$9VCUkEcQqzqz/sg1aYAbM.

Hint

This hint costed 10 points.

Reveal hint

Check out Seclists, there has to be a wordlist in there that will help. Also the hash is in md5crypt.

Write-up

Reveal write-up

As the tip says, popular wordlists don't work. With this knowledge we can assume that rockyou.txt wouldn't work. A popular place to look for password wordlists is Seclists, the biggest wordlist in the repository is xato-net-10-million-passwords.txt. Let's try to crack with that!

echo '$1$CSDCTF$9VCUkEcQqzqz/sg1aYAbM.' > hash && hashcat -m 500 hash /Users/vipin/tech/CTFs/wordlists/xato-net-10-million-passwords.txt

And from that we get the password $1$CSDCTF$9VCUkEcQqzqz/sg1aYAbM.:zaq8xsw5cde3. After wrapping with csd{}, you get the flag.

Flag: csd{zaq8xsw5cde3}

Write-up by Vipin