search

DeadpoolAndObjectOrientedProgramming / icectf-2016

IceCTF 2016 repo
0 stars 0 forks source link

Stage 2 - Complacent #11

Closed koddsson closed 8 years ago

koddsson commented 8 years ago

Description

These silly bankers have gotten pretty complacent with their self signed SSL certificate. I wonder if there's anything in there. complacent.vuln.icec.tf

Solution

Flag is: IceCTF{this_1nformation_wasnt_h1dd3n_at_a11}

koddsson commented 8 years ago

The description pointed me to the SSL certificate but I couldn't view all the info for it in my browser so I googled for this solution that gave me the following command:

openssl s_client -connect complacent.vuln.icec.tf:443 -showcerts

and in the certificate digest was the flag.

koddsson commented 8 years ago

@ikornaselur I can't join the IRC server. Can you let the admins know that maybe the link in the description should have a https:// suffix rather than just http://?

I could see how people might get stuck on that 😄

ikornaselur commented 8 years ago

image