Los participantes que han conseguido resolver el reto han sido publicados en la UAD de la misión. Tendréis el enlace en el apartado más información de esta página.
En primer lugar, como anteriormente, enhorabuena a todos los que lo han sacado y espero que os lo hayáis pasado bien.
En segundo lugar, agradecer de nuevo la aceptación que ha tenido el proyecto, esperamos que se mantenga en el próximo año que está por entrar.
Pasamos a la explicación de como se resolvía este segundo reto "Mission#002":
Pasamos a la explicación de como se resolvía este segundo reto "Mission#002":
En el primer enlace, en el código de la web podíamos ver comentado la ubicación de la fábrica.
Santa Claus Inc
Canada
62º 37' 14.2" N
107º 35' 49.3" W
postal no password
Con esta información y la parte de la descripción del reto en la que nos avisa que solo es accesible desde el país en el que se encuentra la fábrica, podemos ya adivinar que utilizando un proxy de Canadá, podríamos acceder a la siguiente parte.
Al entrar veríamos una imagen muy característica de estas fechas.
Esta imagen, como es de esperar, tiene cierta información dentro, la cuál es necesaria para completar el reto.
Esta imagen, como es de esperar, tiene cierta información dentro, la cuál es necesaria para completar el reto.
Descargaríamos la imagen y usaríamos alguna herramienta de esteganografía para poder comprobar si realmente hay información dentro de ella. En mi caso utilizaré steghide.
Cuando nos pida la contraseña, aceptaremos dejándola en blanco.
Cuando nos pida la contraseña, aceptaremos dejándola en blanco.
La herramienta nos ha sacado una cadena de texto la cuál deberemos decodificar.
A pesar de no ser una codificación tan conocida como base64, también es conocida. En este caso se trata de base32. Con un pequeño comando tendremos ya nuestra flag conseguida.
El nivel de este reto ha sido inferior al del primero, ya que no pretendemos mantener un nivel exacto sino ir variando cada mes para poder ver como evoluciona la gente con los retos propuestos.
Hemos creado un pequeño cuestionario que nos gustaría que rellenárais para poder mejorar el servicio que estamos dando con esta iniciativa de "Una al mes". Cualquier sugerencia será bien recibida e intentaremos que las más repetidas sean cumplidas. Tenéis el enlace en el apartado más informacion.
Por último, desearos Feliz Navidad desde la coordinación de "Una al Mes".
¡Nos vemos con la tercera entrega el 15 de Enero!
Daniel Púa
@arrowcode_
dpua@hispasec.com
Más información:
UAD del reto:
http://unaaldia.hispasec.com/2017/12/segunda-entrega-una-al-mes-mision-002.html
Encuesta sobre el servicio "Una al Mes":
https://docs.google.com/forms/d/e/1FAIpQLSetxUbGRO1kMR0YNSlgxcVAspJyvUNYFH2NL-VMDm9mbOE6ww/viewform?usp=sf_link
Hola a todos,
ResponderEliminarComparto una anecdota de esta mision un poco chistosa, pero dejo en evidencia mis fortalezas como hacker (pocas).
Yo vivo en Canada y nunca tuve problemas en acceder à l'imagen.
Yo pensé en escribir a HISPASEC y comentar que el acceso a la imagen no estaba bloqueado, y al final no lo hice y deje el reto en el olvido.
Y en realidad tenia la mitad del trabajo hecha. Igual si hubiese continuado, quizas no hubiese resuelto el reto.
Comparto la anecdota solo para que nuncan bajen lo brazos en sus retos por muy faciles que parezcan.
Salu2,
H.D.
Eat Your Hell in the Cage - Chilli Casino
ResponderEliminarThe ラッキーニッキー Chilli is a game that's not afraid starvegad to take 10bet your cues from the real games. You can see you're on the edge of some insane insanity and have some
I think this is among the most vital info for me.
ResponderEliminarAnd i am glad reading your article. But wanna remark on few general things,
The website style is great, the articles is really excellent 메이저사이트
The information you provide has helped me greatly. Thank you for all of your time & work. Intimately, the article is in reality the best on this topic. Keep on writing!
ResponderEliminarIt is very helpful and very informative article and I really learned a lot from it. I appreciate this content, this article has been really peaked my eye. Thanks
ResponderEliminarSuch an interesting topic that everyone should know this. keep posting I am happy to helpful information here within the article. Thanks for sharing.
ResponderEliminarI was captured with the piece of resources have got here. Big thumbs up! This site is good and I found very interesting stuff here. Great job, thanks
ResponderEliminarKeep us posted with new updates. its was really valuable. thanks a lot. You make so many great article here and I read your article a couple of times.
ResponderEliminarI appereciate your work. I read your article every thing is clear, Thanks for sharing. I’m impressed with this article, I must say this is one of the best blog!! Thank you for this great read!! I definitely enjoy every little bit of it,
ResponderEliminarpleasant piece of writing and fastidious urging commented at this place, I am genuinely enjoying by these.
ResponderEliminarYay google is my queen assisted me to find this outstanding website!
ResponderEliminarappreciate it for your hard work. You should keep it up forever! Best of luck.!
ResponderEliminarWay cool! Some extremely valid points! I appreciate you penning this write-up
ResponderEliminarThanks for sharing this post. Keep us updated! Fence Repair Amarillo, TX
ResponderEliminar
ResponderEliminarThanks sharing valuable information..
Thanks for sharing a beautiful blog. I got an information from your blog. Keep sharing
lawyers for bankruptcy near me
Good informative post on linux. Thanks for providing the coding here. Keep posting more technical blogs which are useful for us. New Jersey Wire Fraud Lawyer
ResponderEliminarGreat Information sharing .. I am very happy to read this article ..
ResponderEliminarFederal Criminal Lawyer Washington DC
I had a great time reading this blog because it was so informative. Thank you for sharing. Fairfax Grounds for Divorce Lawyer
ResponderEliminarVery educational post about Linux. I appreciate you giving the coding here. Continue to publish helpful technical posts that we can read.
ResponderEliminarcriminal defense attorney prince william county
accidente de camión upsThe announcement of success in a challenge is clear and visible, recognizing the achievements of the participants. Gratitude is expressed in the first and second paragraphs, expressing gratitude for the project's acceptance. A forward-looking optimism is mentioned, fostering anticipation for future participation. A link is placed in the more information section, ensuring easy access to additional details. The closing phrase "Hope You Had a Good Time" emphasizes enjoyment in the participants' experience, creating a sense of community and satisfaction. This approach effectively communicates the project's success and acknowledges the participants' efforts.
ResponderEliminarthank you for the wonderful blog.Abogado de Defensa Criminal Federal de Nueva York
ResponderEliminarThanks for this wonderful post
ResponderEliminarThe collaborative divorce expert's expertise lies in their ability to view divorce as a transformational process rather than solely a legal procedure. new york divorce mediation attorney
abogado dui henrico vaEn primer lugar, como anteriormente, enhorabuena a todos los que lo han sacado y espero que os lo hayáis pasado bien.
ResponderEliminarEn segundo lugar, agradecer de nuevo la aceptación que ha tenido el proyecto, esperamos que se mantenga en el próximo año que está por entrar.
ResponderEliminar"Mission#002 write-up is a compelling narrative that seamlessly blends suspense and intrigue. The intricate details and unexpected twists keep readers on the edge, making it a thrilling and immersive experience."||How Much Does an Uncontested Divorce Cost in New York||How Much is A Divorce in New York City
divorcio en el estado de nueva jersey fostering anticipation for future participation. A link is placed in the more information section, ensuring easy access to additional details. The closing phrase "Hope You Had a Good Time" emphasizes enjoyment in the participants' experience, creating a sense of community and satisfaction.
ResponderEliminarWe are sincerely grateful that your blog contains such excellent material. trucking accident law firm || divorce in new jersey laws.
ResponderEliminarsolicitar el divorcio en nueva jerseyexpressing gratitude for the project's acceptance. A forward-looking optimism is mentioned, fostering anticipation for future participation. A link is placed in the more information section, ensuring easy access to additional details. The closing phrase "Hope You Had a Good Time" emphasizes enjoyment in the participants' experience, creating a sense of community and satisfaction. This approach effectively communicates the project's success and acknowledges
ResponderEliminarMission#002" is an exhilarating and intricately crafted narrative that immediately captures the reader's attention with its blend of suspense, action, and strategic planning. This write-up stands out for its vivid descriptions and fast-paced storytelling, effectively transporting the reader into the midst of an unfolding covert operation. The characters are well-developed, each with their unique traits and skills, which adds depth to the narrative and makes the unfolding events more compelling. The attention to detail in the planning and execution of the mission is particularly noteworthy, showcasing the author's understanding of tactical operations and espionage. This engaging narrative keeps the reader on the edge of their seat, building up to a climax that is both satisfying and leaves room for further continuation. Whether for an avid fan of spy thrillers or someone new to the genre, "Mission#002" delivers an exciting and immersive reading experience.
ResponderEliminara dispute over a contract between
Gunung388
ResponderEliminarIndonesia Online gaming website with the highest return rate to player
we can thank the litigious nature of modern society I suppose.Defensa Criminal Abogado Condado Prince William
ResponderEliminarEl laboratorio es un espacio dedicado a la investigación científica y el desarrollo de nuevos descubrimientos. Aquí, los expertos colaboran en experimentos innovadores para avanzar en el conocimiento y mejorar la calidad de vida. abogado de testamentos y sucesiones
ResponderEliminarIDNCash
ResponderEliminarSitus terpercaya gaming slot,judi dan bola terkini
Your blog always provides such valuable information. This post was no exception - it was well-researched and presented in a clear, engaging manner. I especially appreciated the practical tips you included. Keep up the great work virginia preliminary protective order form
ResponderEliminar
ResponderEliminar"In the captivating write-up, 'Mission#002' unfolds like a thrilling narrative, weaving a tale of suspense and intrigue that keeps readers on the edge of their seats. ||Abogado de Multas de Tráfico Nueva Jersey||Domestic Violence Charges New Jersey With a perfect blend of mystery and revelation, 'Mission#002' masterfully navigates its course, leaving readers eagerly anticipating the next chapter in this riveting adventure."
Congratulations to all participants who cracked Mission#002! The ingenious use of steganography and base32 encoding added an exciting twist to the challenge.
ResponderEliminarHow Much Does Divorce Cost New York
alexandria va divorce lawyerThis write-up stands out for its vivid descriptions and fast-paced storytelling, effectively transporting the reader into the midst of an unfolding covert operation. The characters are well-developed, each with their unique traits and skills, which adds depth to the narrative and makes the unfolding events more compelling. The attention to detail in the planning and execution of the mission is particularly noteworthy, showcasing the author's understanding of tactical operations and espionage
ResponderEliminar