Rating:
# dont-look-inside-the-box-writeup
[noxCTF:dont look inside the box] Just some file fixing, sql and hash.
after entering the dropbox and downloading there is "hashTable" file
the file wont open so i checked it in hex editor(hxd) and saw this:
sqlite format 3 signature as ascii is "SQLite format 3." and not "sqlite format 3." so i fixed it.
i opend it in DB Browser for SQLite to see what inside it and saw 3 tables: Hashs(XorMe), Plains(XorMe) and Flags(values).
in Hashs and Plains there were only one value in each table and both were "XorMe":
* Hashs - 6c7a634e058812fb329863ff42fec497
* Plains - JohnE
in Flags table there were 16777216 values in the form of noxCTF{XXXXXXX}:
in a python program I did xor to Hashs value and Plains after convering Plains to md5 and hex and got new hash
i run in for loop on every value from Flags table, encrypted it as md5 and compared it with the new xored hash. (the code i in cyber.py)
the answer is noxCTF{h4shUL1t3}
