Skip to content

Commit

Permalink
Update index.md
Browse files Browse the repository at this point in the history
  • Loading branch information
RemusDBD authored Jun 28, 2024
1 parent ddd8e1c commit 1eb10b5
Showing 1 changed file with 13 additions and 1 deletion.
14 changes: 13 additions & 1 deletion writeups/ctflearn/2023/1/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,17 +17,29 @@ OS : Windows 10

Procedure :<br>
1) Download the apk (and all the Tools if you do not have)<br>

![](img/roomlayout.png)
2) Use Tool [2] and review source code directly into "com.example.secondapp" > "MainActivity"<br>

3) Use Tool [2] and review source code directly into "com.example.secondapp" > "MainActivity"<br>

![](img/jadxgui.png)

3a) You will see Flag string at the bottom (line 26) <code>((TextView) findViewById(R.id.textView)).setText("Success! CTFlearn{" + editText.getText().toString() + "_is_not_secure!}");</code><br>

![](img/jadxgui-mainactivity-line26.png)

3b) in upper line you will see hash code (line 25) <code>if (DigestUtils.md5Hex(editText.getText().toString()).equalsIgnoreCase("b74dec4f39d35b6a2e6c48e637c8aedb")) {</code><br>

![](img/jadxgui-mainactivity-line25.png)

4) use Tools [3] to identfy the hash and find out it is MD5<br>

![](img/hash-identify.png)

5) use Tools [4] to decrypt MD5 code in 3b)<br>

![](img/hash-decrypt.png)

6) You will get the password<br>
7) use Tools [1] to open the apk<br>
8) enter the password and you will get the flag<br>
Expand Down

0 comments on commit 1eb10b5

Please sign in to comment.