Je vais passer les questions de base de cette room car les solutions sont publiées en vidéos ici https://www.youtube.com/watch?v=enOqvR0-1O4 et les questions sont difficultés.
Le challenge devient plus intéressant avec la Side Quest 1
For those who consider themself intermediate and want another challenge, check McSkidy's hidden note in
/home/mcskidy/Documents/to get access to the key for Side Quest 1!
cat /home/mcskidy/Documents/read-me-please.txt
From: mcskidy
To: whoever finds this
I had a short second when no one was watching. I used it.
I've managed to plant a few clues around the account.
If you can get into the user below and look carefully,
those three little "easter eggs" will combine into a passcode
that unlocks a further message that I encrypted in the
/home/eddi_knapp/Documents/ directory.
I didn't want the wrong eyes to see it.
Access the user account:
username: eddi_knapp
password: S0mething1Sc0ming
There are three hidden easter eggs.
They combine to form the passcode to open my encrypted vault.
Clues (one for each egg):
1)
I ride with your session, not with your chest of files.
Open the little bag your shell carries when you arrive.
2)
The tree shows today; the rings remember yesterday.
Read the ledger’s older pages.
3)
When pixels sleep, their tails sometimes whisper plain words.
Listen to the tail.
Find the fragments, join them in order, and use the resulting passcode
to decrypt the message I left. Be careful — I had to be quick,
and I left only enough to get help.
~ McSkidy
mcskidy@tbfc-web01:~$ su -l eddi_knapp
Password:
eddi_knapp@tbfc-web01:~$ env
SHELL=/bin/bash
PASSFRAG1=3ast3r
GTK_MODULES=appmenu-gtk-module
PWD=/home/eddi_knapp
on obtient PASSFRAG1=3ast3r
L’indice numéro 2 nous indique que l’arborescence nous donne les données actuelles mais nous invite à lire le REGISTRE pour les données passées.
En cherchant on trouve des logs git du répertoire /home/eddi_knapp/.secret qui a entre temps été chiffré
En fouinant dans les logs de .secret_git/.git/logs/ comme ceci:
root@tbfc-web01:/home/eddi_knapp$ cat .secret_git/.git/logs/HEAD
0000000000000000000000000000000000000000 b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda mcskiddy <[email protected]> 1760030393 +0000 commit (initial): add private note
b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda 98f546c0a5bda1fe311a877ef412d6b1cfd8c261 mcskiddy <[email protected]> 1760030411 +0000 commit: remove sensitive note
98f546c0a5bda1fe311a877ef412d6b1cfd8c261 0a7462ad42af2a6fc45b0f0adebc624b3ae69fd7 mcskiddy <[email protected]> 1762862505 +0000 rebase (start): checkout 0a7462ad42af2a6fc45b0f0adebc624b3ae69fd7
0a7462ad42af2a6fc45b0f0adebc624b3ae69fd7 b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda mcskiddy <[email protected]> 1762862505 +0000 rebase: fast-forward
b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda d12875c8b62e089320880b9b7e41d6765818af3d mcskiddy <[email protected]> 1762862740 +0000 commit (amend): add private note
d12875c8b62e089320880b9b7e41d6765818af3d e924698378132991ee08f050251242a092c548fd mcskiddy <[email protected]> 1762862835 +0000 rebase (continue): remove sensitive note
e924698378132991ee08f050251242a092c548fd e924698378132991ee08f050251242a092c548fd mcskiddy <[email protected]> 1762862853 +0000 rebase (finish): returning to refs/heads/master
on identifie le commit b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda. (”add private note”)
eddi_knapp@tbfc-web01:~/.secret_git/.git$ git show b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda
le git show du commit nous donne le deuxième fragment
commit b65ff21ee1fb6b5d27894a6ae7bbfbf409e33fda
Author: mcskiddy <[email protected]>
Date: Thu Oct 9 17:19:53 2025 +0000
add private note
diff --git a/secret_note.txt b/secret_note.txt
new file mode 100755
index 0000000..7735b7e
--- /dev/null
+++ b/secret_note.txt
@@ -0,0 +1,5 @@
+========================================
+Private note from mcskiddy
+========================================
+We hid things to buy time.
+PASSFRAG2: -1s-