basic-pass-2 (150)

Problem

Your company is testing out its new employee portal. After your previous shot, they made the password a bit more secure, so you can't brute force it anymore. Rise up to the occasion and demonstrate why a local machine is a bad idea, and having the account credentials on a remote server is a better idea.

(Attachments: files/basic-pass-2-linux)

Solution

Same thing as basic-pass-1. We can run strings on the file and then grep it for the flag.

$ strings basic-pass-2-linux | grep "bcactf{.*}"
Congrats! The key is bcactf{its_another_password}

Original writeup (https://github.com/shawnduong/ctf-writeups/blob/master/2019-BCA/reversing/basic-pass-2.md).