Securinets Tekup mini-CTF:Waywa

TASK

Solve

This zip file contains a password in order to crack it im going to use john the ripper, its already available in kali linux no need for installation first command is to get the hash from the zip

zip2john task.zip > taskhash.txt

Next step to use a wordlist to crack the password, you can find your wordlist in the folder /usr/share/wordlists

john --wordlist=/home/alimsahli/Desktop/rockyou.txt hash.txt

after we extracting it with the password we can find two files a7a_is_safe.pdf secured with password and useme.txt contains this link :

https://github.com/alimsahli/Password-Generator/blob/main/wordlist.txt

this link contains a custom wordlist that we can use to crack the pdf. First we need to download it Then we need to get the pdf hash using

pdf2john a7a_is_safe.pdf > hashpdf.txt

now using the custom wordlist we can crack it

john --wordlist=wordlist.txt hashpdf.txt

and the password is “StrongPassword” After opening the pdf we can see the flag in the picture of the footballer Ben Hmida

Flag

Securinets{b3n_w4yw4_Ya_wA7ch}