Hi.
Now, we did this lecture, we're going to continue our bandit CTF challenges now we are inside of Bendat
nine and we're going to make it our way into the level 10 right now.
So as you can see in the tapes, we see the password for the next level is again stirred within the
data that texte and it's preceded by several equal characters.
Let's see that by going inside of the it's already in here.
Let's just get that out and see what it contains.
Here you go.
It contains a lot of gibberish data.
I believe it's not human readable in most of the cases, but there are some characters inside of this
and it says that, yeah, it's one of the few human readable strings and preceded by the several equal
characters.
So all we got to do is just find the characters that's human readable after some equal size.
And we can actually use the same thing as we have done before.
Right.
We can just call the strings and grab together by piping them, combining them together like this strings
data that takes the pipe them to pipe it to grep and we're going to grab the equals sign.
And here you go.
I believe here is the thing that we're looking for.
Right.
So this should be it.
But I'm going to test this to see if this works or not.
I'm going to copy this.
And there are some other characters over here.
But let's see, let me come over here and not know the password and let's check the length of this.
Yeah, here you go.
It fits perfectly.
So I believe this is our password.
I'm going to save this and I'm going to take that out of this one and try to log in to the next one,
which has been the ten.
And of course, we're going to test receive this password that we have together is right or wrong.
Here you go, paste the selection and hit enter.
I'm going to clear this out and I'm going to go into the level ten.
So this is from level ten to level eleven.
And again, this is inside of the data that you see right now, which it contains some base64 encoded
data.
So let me see it first.
So this is data and actually this is very small design, I believe.
Yeah, six to nine bytes.
So let me get this out and see the content.
And here you go.
We only have one hash over here, but it's definitely encoded with something because it's longer than
we used to see.
And if we just tried this to login to the level eleven, it won't work.
Right, because it's encoded.
So base64 is an encoding technique that we use and we can use the same thing to decode it as well.
Right.
So we have to decode it and see if we can get the actual thing over here.
Let me just run base64 dash dash help.
So, you know, to decode a base64 encrypted text, we can use decode parameter over here or Dashti
or dash dash decode.
So let me just try to run it like this.
Base64 Dashty data that texte and here you go.
The password is this so it's easier to decode it.
Right.
So I believe we're going to face of some other harder encryptions during this Bendit challenge, but
I'm going to save it for right now because we gathered our password.
And let's go to the Bendit Eleven.
I'm going to exit out of this one and let me connect to the Bendat Eleven over here and hit enter.
So as you can see, it's taking its time.
Here you go.
It asks for the password and once we hit enter we are inside.
Yep.
Here we go.
So I'm going to open the tips for level twelve.
We're inside of eleven and we want to go to twelve.
So the password for the next level is stored in the data takes one more time.
They're all lower case and uppercase letters have been rotated by thirteen possessions.
I don't even know what it means, have been rotated by thirteen positions.
But I believe we have to just look at ourselves in order to understand this.
Right.
So let me go over here to other salay.
Here we go with.
Data that text file, it's simple file.
Let me get this and yeah, here you go.
I believe this is over.
Encrypted data so have been rotated by 13 positions and I believe this stands for the wrought encryption.
OK, now I get what it means.
So like base64, there's another encryption algorithm or two encryption technique that we use, OK?
And it's actually commonly used in this kind of ETFs as well.
So we can use some kind of tools that we see inside of Linux or we can just find an online decryption
as well.
So I'm going to show you what I mean.
Let, like, go to Google dot com and just write rotating encryption decoder, OK, rotation, encryption
decoder.
So if you don't even know there's something called robt, OK, rule 13 or something like that, you
can still find it.
As you can see, I just Googled the rotation encryption decoder.
So we just want to decode something that has been rotated 13 times and 213 is actually kind of a standard
number over here.
Turchin is commonly used.
So I'm going to try this over here, OK?
So rotation to use your old number 13.
Yep.
Here you go.
And yep.
13.
So I'm going to say decrypts and let's see if this works or not.
Yep.
It actually works.
We can see the password is something like this.
OK, we can see the password over here, but we cannot see the upper case or lower case letters in this
website.
And I believe this is not a good website, by the way.
You can see the user interface is a little bit strange, like a pirate website or something like that.
We can try to say full ASCII table or we can try to change the uppercase lowercase options from here.
But let me just copy and paste it so you can see it in a better way.
As you can see, we get the password, but we don't actually get the uppercase lowercase letters, which
is not good for us.
We have to get the uppercase lowercase letters as well.
So I believe we have to go for another direction over here, which is to find another website.
So this is the first Web site that I have seen when I did this search.
So let me go to Rottman Cipher.
Yep, this is the same website, I believe.
Nope.
Um, let me just go to another website, which is 13 dot com or cryptid or the blup the blob dot org.
Yep.
This seems promising to let me just come over here.
Yeah.
This is only for encryption I believe.
Please enter the number to rotate.
Yep.
This is not what I'm looking for.
So let me come over here to another website like cryptid dot com.
So as you can see, I'm just trying online, OK, we will eventually find something that works.
So let me try to get the thing over here.
Let me copy this one more time from there, OK?
And pasted over here and here you go.
Now we get this.
The translation is the password.
Is this.
So here, go.
Let me just copy this and let me come over here and Nanoha into my password that texte and save it over
there.
So this is a simple algorithm to encrypt the message.
And as you can see, it took us some time to find the decryption of it.
But right now we know that this website works bug centric.
So let me try to see if this works or not.
Let me try to go into the bend the twelfth, OK?
And let me paste the thing that we have copied.
And here you go.
We are inside of Bandha twelve.
So let me just close this down.
And we have actually learned there is something called thirteen.
And if you come across in a situation that you need to decrypt, there are thirteen.
Now you know what to do.
So here we go.
The password for the next level is starting the file data, the text one more time.
But again, this is something interesting, which is a hex dump of a file that has been repeatedly compressed.
So let.
Me, just Dualla salay, and let me just get the data that texte yeah, we have this hex dump over here,
if you have never seen this before, it's hexadecimal dump of that file of that file that we are working
on like like a binary expression of that file, but not in a binary system, but in an hexadecimal system.
Maybe, you know, that binary is ones and twos and hexadecimal has 16 characters rather than two characters
like 16 numbers rather than two numbers.
Zero one is binary and zero 15 is hexadecimal.
So this is the hexadecimal representation of a file.
And again, this is a file that has been repeatedly compressed.
So this is a hard one I believe in.
Anyway, we have to just convert this into a file and then we have to find a way to decompress the file,
to gather the password.
And it's not very hard.
OK, you have to know how to create files from hexadecimal, so that's all.
But it's saying that repeatedly compressed.
So it's what's scaring me.
OK, so I'm going to stop here and do this within the next lecture.