SmpleKye

SmpleKye is an information security challenge in the Web category, and was presented to participants of KAF CTF 2019

Challenge story

No story

Challenge exploit

Basic POW (Bruteforcing hashes)

Challenge solution

<?php

const LEN = 7;

$to = "00";

r($to);

function r($to){
	foreach(str_split("01234567890abcdef") as $c){
		if(strlen($to) === LEN - 1){
			if(strpos(hash("sha256", $to . $c), $to . $c) !== false)
				echo $to . $c . "\n";
		}else{
			r($to . $c);
		}
	}
}

Building and installing

Clone the repository, then type the following command to build the container:

docker build . -t smplekye

To run the challenge, execute the following command:

docker run --rm -d -p 1080:80 smplekye

Usage

You may now access the challenge interface through your browser: http://localhost:1080

Flag

Flag is:

KAF{ju57_4_51mpl3_pr00F_0F_w0Rk}

License

MIT License