Rating:

# Tenable CTF 2021 Writeup
This repository serves as a writeup for Tenable CTF 2021

## The ultimate mutant marvel taem-up

**Category:** Tenable
**Points:** 25
**Description:**

File: [Linux_Scan.db](resources/tenable-25-the_ultimate_mutant_marvel_team_up/Linux_Scan.db)

### Write-up
In this task, we need to install Nessus scanner and use it to read the encrypted database, so I've installed its community version (free with a trial version).

In the main page, there was an "Import" button that I've used to upload the Nessus Database "Linux_Scan.db" with the required password.

And that's how we got the scan results called "Linux Scan". When we access this scan:

I tried to search for the flag in the Filter input but I wasn't be able to find it.

But I found something that could be interesting which is the Export button:

We know that the file that we've imported was a Nessus DB but what about the Nessus export?

After I exported the file and I downloaded it I got a text file [Linux_Scan_uuo914.nessus](resources/tenable-25-the_ultimate_mutant_marvel_team_up/Linux_Scan_uuo914.nessus) which contains the flag.

The flag contains an encoded HTML character which is the "'".

So the flag is flag{1t's eXt3n51bl3}.

_____

## Knowledge is knowing a tomato is a fruit

**Category:** Tenable
**Points:** 25
**Description:**

File: [Linux_Scan.db](resources/tenable-25-the_ultimate_mutant_marvel_team_up/Linux_Scan.db)

### Write-up
This is the continuity of the previous task.

In this task, I tried to download the scan results for the host 172.26.48.53 using the "Download" link:

I searched for the flag in the downloaded .txt [kb_172.26.48.53.txt](resources/tenable-25-knowledge_is_knowing_a_tomato_is_a_fruit/kb_172.26.48.53.txt) file and I found it:

So, the flag is flag{bu7 n07 putt1ng 1t 1n 4 fru17 [email protected], [email protected] W1SD0M}.
___

# Scoreboard

In this CTF, we played as a team S3c5murf with [Likkrid](https://twitter.com/RidhaBejaoui1) and [v3rlust](https://twitter.com/dal0ul) and we got ranked 100th/1762:

...

...

All the tasks that we've solved and we didn't solved as a team:

CTFTime event: [https://ctftime.org/event/1266](https://ctftime.org/event/1266)

Original writeup (https://github.com/mohamedaymenkarmous/CTF/tree/master/Tenable_CTF_2021#the-ultimate-mutant-marvel-taem-up).