ctf_aria

write up ctf by ariafatah

---

Project maintained by ariafatah0711 Hosted on GitHub Pages — Theme by mattgraham

soal

There is some interesting information hidden around this site http://mercury.picoctf.net:55079/. Can you find it?

hint

• You should have enough hints to find the files, don’t run a brute forcer.

solve

• saya menemukan flag di
  • view-source:http://mercury.picoctf.net:55079/ <!-- Here's the first part of the flag: picoCTF{t -->
  • http://mercury.picoctf.net:55079/mycss.css /* CSS makes the page look nice, and yes, it also has part of the flag. Here's part 2: h4ts_4_l0 */
  • dan yang ketiga saya tidak menemukan di js namun ketika saya cek di robots.txt
    • http://mercury.picoctf.net:55079/robots.txt

      User-agent: *
      Disallow: /index.html
      # Part 3: t_0f_pl4c
      # I think this is an apache server... can you Access the next flag?
      

    • dan karena di flag ketiga terdapat kata apachhe mungkin di htaccess jadi saya coba cek
      • http://mercury.picoctf.net:55079/.htaccess

        # Part 4: 3s_2_lO0k
        # I love making websites on my Mac, I can Store a lot of information there.
        

    • lalu saya mencari flag yang terakhir hanya saja tidak menemukan
      • saya mencari di goggle dan ternyata ada file .DS_Store pada mac
      • https://iboysoft.com/wiki/ds-store.html
      • http://mercury.picoctf.net:55079/.DS_Store Congrats! You completed the scavenger hunt. Part 5: _74cceb07}
• lalu saya menggabungkan format flag picoCTF{th4ts_4_l0t_0f_pl4c3s_2_lO0k_74cceb07}

flag

picoCTF{th4ts_4_l0t_0f_pl4c3s_2_lO0k_74cceb07}