So I used cewl (which I have a post about on here as well ) to generate a list and decided to use that list with Burp Suite to attempt to brute force the login.
#ALL THAT REMAINS 1 WALKTHROUGH APP WRAPPER MOVIE#
Now that I know this CTF is based on the movie and the flag name mentions dialogue, I decided to try and make a password list from the script. I try this with the numbers still to no avail. So the username is probably carl.hanratty. Things are making more sense now, I've seen the name Frank Abagnale and FBI and I learn that Agent Hanratty's name is Carl. Seriously? This is some obscure movie reference? (I personally hate obscure movie references in CTFs because I have seen almost NO popular movies, my fault, still annoying). At first I see some James Hanratty stuff, but as I scroll down I see 'hanratty catch me if you can'. So, thinking back to doug.perterson from the html5.js, I don't know "Agent Hanratty's" first name, so I google 'hanratty'. Sure enough, I get a authentication required prompt. Could this be new evidence? A directory doesn't exist with those numbers, let's try using the clue newevidence. So, looking through the webpage, there are certain numbers that are made bold, 'six, one, 7, 4, 6, 8'. Ok, i need evidence of whatever 'new evidence' is.
And if you look near the bottom, we get a flag! There is also a clue, "Clue = new+flag".
0 kommentar(er)
