challenges
Game 12
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
| http://suninatas.com/admin/
// get qrcode, scan
MECARD:N:;TEL:;EMAIL:;NOTE:;URL:http://suninatas.com/admin/admlogin.asp;ADR:;
// check url, get the file
<embed src="admlogin.swf">
// download
❯ file a.swf
a.swf: Macromedia Flash data (compressed), version 8
// use ffdec btw
❯ paru -Ss ffdec
aur/ffdec 25.0.0-2 [+35 ~0.16]
Open Source Flash SWF decompiler and editor
|
import file to ffdec and search auth keyword
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
| on(release){
function receipt()
{
if(flashid != "admin" or flashpw != "myadmin!@")
{
flashmessage = "Wrong ID or PW";
play();
}
else
{
flashmessage = "Auth : "Today is a Good day~~~"";
play();
}
}
receipt();
}
|