Walkthrough
1. Good Advice (5)
We are given a QR code, which I scan and get: RkxBRyhQcmVwYXJhdGlvbikgaXMgdGhlIGtleSB0byBzdWNjZXNzLg==
In CyberChef I decrypt it from Base64:
Answer: FLAG(Preparation)
2. One Off (5)
We get this Hex value:
58 69 62 75 21 6A 67 21 4A 21 75 70 6D 65 21 7A 70 76 21 75 69 66 21 67 6D 62 68 21 78 62 74 3B 21 4E 6A 6E 6A 64
Again, in CyberChef – decode using “From Hex”:
I’m no cipherkween, so I go to my CTF fave💕 and paste the output, the site analyzes the string and gives me their own recommendations:
Decrypting with the suggested ROT1Cipher I get this: What!if!I!told!you!the!flag!was;!Mimic.
Answer: Mimic
3. Success (5)
PJGXI zs t kvngrgiei egkcqxek htrnwifq ufv tlvcmzcaxt gdmdugqqnizsc. Hvrx, es hhv mi tf egkcqt wppg(khbvuf4j2wmcd).
It took me ages!! Especially since I lost the link to another 💕CTF FAVE💕. Copy-paste and …
Answer: flag(things4u2find)
4. Validation (5)
Flag will be in format FLAG(something)
4d6179626520697473206e6f74206120666c61672874316d333574346d70293f
CyberChef4Life – Decoding from Hex:
Answer: flag(t1m35t4mp)
5. Spam (10)
Dear Business person , Especially for you – this cutting-edge intelligence ! This is a one time mailing there is no need to request removal if you won’t want any more . This mail is being sent in compliance with Senate bill 2416 ; Title 7 ; Section 309 . This is a ligitimate business proposal . Why work for somebody else when you can become rich inside 14 DAYS ! Have you ever noticed nearly every commercial on television has a .com on in it & more people than ever are surfing the web ! Well, now is your chance to capitalize on this ! WE will help YOU SELL MORE and SELL MORE ! You are guaranteed to succeed because we take all the risk ! But don’t believe us ! Prof Anderson of Indiana tried us and says “I was skeptical but it worked for me” ! We assure you that we operate within all applicable laws ! You have no reason not to act now ! Sign up a friend and you get half off . Thanks !
Googling Spam Cipher takes me to this website I paste the message and hit decode:
Answer: robotsarebad
6. Comes Before Time (5)
1618091305
So this is an Epoch Timestamp. Converting to Date I get:
Before Time – April 10? Saturday April 10? 2021-04-10? Date?
Trying Letter Number (A1Z26) using Automatic (Basic cases):
PRIME? Prime Time?
Googling “Before Time” – The Land Before Time floods my page. 🤔 🤔 🤔 🤔 confused
Prime seems like the most logical answer, and it is the right answer!
Answer: PRIME
