 Hey YouTube, this is John Hammond more on picoctf 2018 this challenge is called strings for hundred points It says can you find the flag in this file without actually running it? You can find the file here at this location on the shell server, but we're given a download So we can just go ahead and copy that I will W get it into my directory here And it's gonna take a little bit. I guess my internet just sucks Okay, now that that's finally done. We can take a look at what this is I kind of already have an inkling as to what to do and how to solve this considering the challenge prompt But it looks like an executable. So let's just kind of play long mark this executable and run it It says have you ever used the strings function check out the man pages? So if you want to check out man strings, you totally could but it will just print these strings for printable characters in Specific file so we can just pass along the file as an argument to this So let's run strings and the file is literally called string So that's not I don't mean for it to be confusing, but maybe that's just as we see here So it gets all the strings out of it looks like there's a lot of stuff in here You could scroll through it if you particularly wanted to but it looks like it's even more of my terminal history that I can't scroll past So what I'm gonna do is actually just rep again for the flag format, and I will just use Pico CTF with The regular expressions to go ahead and get the insides of the flag and I'll disable the color there So simply that will give us the flag we can go ahead and submit that if we wanted to But let's just make a simple get flag script for it. So get flag dot sh simple shebang line ch mod Plus X to mark that is executable Redirected to flag dot text, and let's grab it to our clipboard so that we can submit it get that 100 points All right, cool. So let's mark that challenge is complete super simple The next one that we can move on to is called pipe It says during your adventure you'll likely encounter a situation where you'll need to process data that you receive or the network rather than through a File can you find a way to save the output from this program and search for the flag connect to this? So we're given a host and port number. Let's go ahead and connect to it. What I'm gonna do is actually change into the pipe Directory that I have already created and let's connect to that host and port with netcat. So it gives me a lot of garbage I'm sorry. You're gonna have taken the line blah, blah, blah. This is not a flag etc, etc And there's just a lot of stuff my internet connection is still crapping out. I'm gonna pause this a bit Whatever it looks like I'll just deal the methodology can still work here if we actually get results from this service So what I'm gonna do is just as we've done before it kind of take that output and Grip through it. So wait until we get a response. That is our flag. So let's go pico CTF the exact same format format Color equals none and then eventually we'll get the hit it should happen pretty quickly on your side I guess because my internet just sucks at the moment. We'll see how it goes. Okay out pop the flag and We can go ahead and do this if you wanted to you could just simply save this as our get flags for it It's certainly easier or probably better on your side because your net will work better than mine But I'm just gonna go ahead and save this and mark it as the flag We'll go ahead and submit that simple stuff, right? Just the strings command All these singles command for the last one and using grep and this time again using grep to just read through all the output that this service So this net cat connection is spitting out at us. So let's go ahead and mark that as complete Just burning through these good stuff and this next challenge is called inspect me for 125 points It says inspect this code gives us a link to a website and we can go ahead and click that link open it up It says my first website intro and about you can click on these but there's not a whole lot here It says these are web skills. I've been practicing HTML CSS and JavaScript So I'm gonna hit control you or you could right-click and just say view page source But control use a good hot key for it on the keyboard It says my first website and you get to age you get to see the HTML source You get to see what is the web page is actually made out of and how it's built So it says I learned HTML. Here's part one-third of the flag. It says Pico CTF your for real inspect and Looks like we have to get the rest of it. So let's go ahead and I've got a directory created for it I'm just going to start to build up the flag as I find pieces of it I think we've done this before in Pico CTF 2017, but Noting what we just read so far. This person is trying to learn CSS and JavaScript Let's check out those other files. You can see that they are linked up top over in the head tag of this HTML So let's check out the my CSS dot CSS file. There's some cool CSS, but there's also a comment It says I learned CSS. Here's the next part of the flag It looks like that that is actually just the very end of the flag if Like you can see the format the end and curly brace at the very end here And if I actually were to go back and check out the my JavaScript.js It says here's part three-thirds of the flag and it's just simply a blank space So looks like we already just got the two flag pieces that we need from the HTML and the CSS Let's go ahead and copy that and submit it Nice and easy another simple challenge cool All right, we can mark that challenges complete and we've just burned through another couple like a few of the Pico CTF challenges So I hope you are enjoying these right now again. The challenges aren't too difficult But it's certainly good to learn and look at the some of the stuff if you haven't seen it before So I hope it is helping some people quick shut out to the people that support me on patreon Thank you guys so much. I cannot say it enough. I love you. I Figured the like short uncomfortable silence following that would just make it more more genuine But I do love you guys are the best. Thank you one dollar a month on page I'll give you a special shout out just like this at the end of every video five dollars or more And patron will give you early access to everything that I release on YouTube before it goes live So in case I record a lot of content just kind of backlog you get it ready for YouTube to gradually release it on Just a schedule you can get the content right when it's ready right when it's done recorded and it's it's hot and fresh Just out of the oven Thanks so much. Hey, if you did like this video, please you like comment and subscribe it helps me grow helps the channel grow It's awesome Please do join our discord server link in the description cool community full of CTO players programmers and hackers You can hang out with me and other awesome people a lot of smart dudes in there Certainly more smarter than I meet than me smarter than I am look at that. I'm just I'm being stupid even right now All right, thanks guys. Hope you enjoyed this video. Hope to see you on patreon. I love you. Take it easy