Skip to content

Commit 83400f9

Browse files
Git-LoganGit-Logan
authored
Add files via upload
1 parent 82a2875 commit 83400f9

File tree

4 files changed

+171
-0
lines changed

4 files changed

+171
-0
lines changed

‎osint/contributor/README.md

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
# contributor
2+
3+
## Challenge Text
4+
* Aren’t tech talks great? The JerseyCTF organizing staff is so grateful that our speakers can share their wonderful experiences with our participants. In fact, one of the speakers actually helped us develop https://www.jerseyctf.com/ and http://www.jerseyctf.online/. How cool is that!
5+
6+
## Hint
7+
* 1.0 × 10^100
8+
9+
## Solution
10+
* In the https://www.jerseyctf.com/ source code, find the **DRodgers** comment matches with the speaker Donnie Rodgers.
11+
* Using the **Forgot Password?** feature on http://www.jerseyctf.online, enter **DRodgers** for 3 security questions.
12+
* Using Google, locate Donnie Rodgers' [LinkedIn](https://www.linkedin.com/in/donnie-rodgers) by searching `Donnie Rodgers PlainDilemma` with the 3 answers being **Bank Heist Security 101**, **Rahway**, and **Arm wrestling**.
13+
* Flag: `jctf{b3_CAR3fu1_wh@t_yOU_put_on_the_WEB}`
14+
* Shares website with web/heres-my-password challenge.
15+
16+
* **Important:** Donnie Rodgers is a fictional person. His name and connections to academic institutions and companies are all made up. His face is AI generated and is not a real person.
17+
18+
## Credit
19+
* Developed by [Logan](https://github.com/Git-Logan)
20+
* AI generated face made by https://generated.photos/face-generator/new

‎osint/contributor/other/forgot_password.php

+109
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,109 @@
1+
<?php
2+
define("USERNAME", "DRodgers");
3+
define("FLAG", "jctf{b3_CAR3fu1_wh@t_yOU_put_on_the_WEB}");
4+
$questions = [
5+
"q1" => [
6+
"q" => "What was your first job's company name?",
7+
"a" => "Bank Heist Security 101"
8+
],
9+
"q2" => [
10+
"q" => "What city was your high school located in?",
11+
"a" => "Rahway",
12+
],
13+
"q3" => [
14+
"q" => "What is your favorite sport?",
15+
"a" => "Arm wrestling"
16+
]
17+
];
18+
19+
function showFirstForm()
20+
{
21+
?>
22+
<form action="" method="post">
23+
<label>Username
24+
<input type="text" name="username">
25+
</label>
26+
<input type="submit" value="Continue" name="submit">
27+
</form>
28+
<?php
29+
}
30+
31+
function showSecondForm()
32+
{
33+
global $questions;
34+
?>
35+
<h2>Security Questions</h2>
36+
<form action="" method="post">
37+
<?php
38+
foreach ($questions as $question_id => $question) { ?>
39+
<label><?php echo $question["q"]; ?>
40+
<input type="text" name="<?php echo $question_id; ?>">
41+
</label>
42+
<br>
43+
<?php } ?>
44+
<input type="submit" value="Reset Password" name="submit">
45+
</form>
46+
<?php
47+
}
48+
49+
function scriptAlert($msg)
50+
{
51+
?>
52+
<script>
53+
alert("<?php echo $msg; ?>");
54+
</script>
55+
<noscript>
56+
<p>
57+
<?php echo $msg; ?>
58+
</p>
59+
</noscript>
60+
<?php
61+
}
62+
?>
63+
<!DOCTYPE html>
64+
<html lang="en">
65+
66+
<head>
67+
<meta charset="UTF-8">
68+
<title>Forgot Password</title>
69+
</head>
70+
71+
<body>
72+
<h1>Forgot Password</h1>
73+
74+
<?php
75+
if (isset($_POST["submit"])) {
76+
// 1st "public" layer of form
77+
if (isset($_POST["username"])) {
78+
if ($_POST["username"] === USERNAME) {
79+
showSecondForm();
80+
} else if ($_POST["username"] === "Wolverine") {
81+
showFirstForm();
82+
scriptAlert("Nice try! Find another user.");
83+
} else {
84+
showFirstForm();
85+
}
86+
}
87+
// 2nd form is "secret", know by checking the form input names
88+
else if (count(array_intersect_key($questions, $_POST)) === count($questions)) {
89+
$missed_question = null;
90+
foreach ($questions as $question_id => $question) {
91+
if ($_POST[$question_id] !== $question["a"]) {
92+
$missed_question = $question;
93+
break;
94+
}
95+
}
96+
if ($missed_question === null) {
97+
showFirstForm();
98+
scriptAlert(FLAG);
99+
} else {
100+
showSecondForm();
101+
scriptAlert("Incorrect Answer(s)");
102+
}
103+
}
104+
} else {
105+
showFirstForm();
106+
} ?>
107+
</body>
108+
109+
</html>

‎osint/contributor/other/headshot.png

300 KB
Loading

‎osint/contributor/other/index.php

+42
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
<?php
2+
define("USERNAME", "Wolverine");
3+
define("PASSWORD", "lightswitchon_and_offLOL26");
4+
define("FLAG", "jctf{c0NGR@T2_y0U_p@22wORd_SPR@y3D!}");
5+
?>
6+
<!DOCTYPE html>
7+
<html lang="en">
8+
9+
<head>
10+
<meta charset="UTF-8">
11+
<title>Login</title>
12+
</head>
13+
14+
<body>
15+
<h1>Login</h1>
16+
<form action="" method="post">
17+
<label>Username
18+
<input type="text" name="username">
19+
</label>
20+
<br>
21+
<label>Password
22+
<input type="password" name="password">
23+
</label>
24+
<br>
25+
<input type="submit" value="Login" name="submit">
26+
</form>
27+
<a href="forgot_password.php">Forgot Password?</a>
28+
<?php
29+
if (isset($_POST["submit"])) {
30+
if ($_POST["username"] === USERNAME && $_POST["password"] === PASSWORD) { ?>
31+
<script>
32+
alert("<?php echo FLAG ?>");
33+
</script>
34+
<?php } else { ?>
35+
<script>
36+
alert("Invalid login");
37+
</script>
38+
<?php }
39+
} ?>
40+
</body>
41+
42+
</html>

0 commit comments

Comments
 (0)