Information#
Version#
| By | Version | Comment |
|---|---|---|
| noraj | 1.0 | Creation |
CTF#
- Name : IceCTF 2016
- Website : https://icec.tf/
- Type : Online
- Format : Jeopardy
- CTF Time : link
Description#
These silly bankers have gotten pretty complacent with their self signed SSL certificate. I wonder if there's anything in there. complacent.vuln.icec.tf
Solution#
With Mozilla Firefox (method 1):
- Go to https://complacent.vuln.icec.tf/.
- Accept security exceptions.
- Open the Inspect Element pannel.
- Go to the Network tab and reload.
- Select the main GET request.
- Select the Security tab.
- The Certificate: Organizational Unit (OU) is Flag: IceCTF{this_1nformation_wasnt_h1dd3n_at_a11}.
or
With Mozilla Firefox (method 2):
- Go to https://complacent.vuln.icec.tf/.
- Accept security exceptions.
- Click on the lock next to the URL bar.
- Then click on the arrow at the right of the little pop-up.
- Click on More Information button.
- Go to the Security tab.
- Click on the View Certificate button.
- Look at infos in the General tab.
- The Certificate: Organizational Unit (OU) is Flag: IceCTF{this_1nformation_wasnt_h1dd3n_at_a11}.
PS: there is a lot of other methods