---
# System prepended metadata

title: CTF PwnedCR 2022
tags: [ctf]

---

# CTF PwnedCR 2022
###### tags: `ctf`

## Web

### Reto 1: El regalo

![](https://i.imgur.com/RT5TlLV.png)

#### Solution

Using CyberChef we decoded the string from ASCII Base64 into its raw format.

![](https://i.imgur.com/7UHy3TX.png)


:::success
PWNEDCR{venimos_en_paz_ghei@90$#}
:::

### Reto 2: Cryptonita

![](https://i.imgur.com/wb8eYtn.png)

#### Solution

We checked the web page source code to find hidden elements

![](https://i.imgur.com/pqvFL1l.png)

Using CyberChef we decoded the string from ASCII Base64 into its raw format.

First transform

![](https://i.imgur.com/26YtPJV.png)

Second transform

![](https://i.imgur.com/2kQYfyr.png)


:::success
PWNEDCR{sector_4_apartamento_65_zona_nuclear_desalojada_5$32@1}
:::

### Reto 3: Tron

![](https://i.imgur.com/jm7xXZ7.png)

#### Solution

Using strings, we analyzed the strings on the image.

![](https://i.imgur.com/Ov2gOy3.png)


:::success
PWNEDCR{tron_1982_@13km79$fn@}
:::

### Reto 4: Enumérame

![](https://i.imgur.com/VFvUNvH.png)

#### Solution

Using Burpsuite -> Intruder and using a 3 digits wordlist https://raw.githubusercontent.com/danielmiessler/SecLists/master/Fuzzing/3-digits-000-999.txt we found a parameter with the flag

![](https://i.imgur.com/bLKLt2f.png)

![](https://i.imgur.com/3ip3Ko4.png)

https://ctf.pwnedcr.com/retos/reto4.php?id=126

:::success
PWNEDCR{enumerar_no_es_solo_atacar067#h@!}
:::



### Reto 5: Bruto el fuerte

![](https://i.imgur.com/V2GXtxF.png)


https://ctf.pwnedcr.com/retos/reto5_login.php

![](https://i.imgur.com/xZUotF4.png)


#### Solution

Using Hydra, with the parameters:

hydra -L /home/kali/Desktop/top-usernames-shortlist.txt -P /home/kali/Desktop/rockyou_top-1k.txt ctf.pwnedcr.com https-post-form "/retos/reto5_login.php:username=\^USER\^&password=\^PASS\^&login=:Wrong password"

Hydra found many valid password, however, that was because the site returned the value "Wrong username".


![](https://i.imgur.com/1Afgkk8.png)

![](https://i.imgur.com/15nolu6.png)

So, we checked for a user that only appears one time.

![](https://i.imgur.com/yAoLgud.png)

login: admin
password: jordan23

![](https://i.imgur.com/7Hqsug3.png)



:::success
PWNEDCR{ataque_por_fuerza_bruta07umr@sf!}
:::


### Reto 6: El silencio de los kiddies

![](https://i.imgur.com/fgDbvVe.png)

#### Solution

:::success

:::

### Reto 7: Siete a cero

![](https://i.imgur.com/mxSwCSO.png)

#### Solution

:::success

:::


### Reto 8: Scripteando

![](https://i.imgur.com/126xdzK.png)


#### Solution

Check the source code of the website for a script

![](https://i.imgur.com/5o4NrLd.png)


:::success
PWNEDCR{scripteando_por_la_vida_@$!khj957}
:::