Passing on Complexity

50

Instructions

ESU’s IT staff swears up and down that the backup user’s password is secure and follows best practice. Their internal auditors are not convinced and are asking for your help to determine the backup user’s password at the time of the breach.

Submit the flag as flag{password}.

Use the packet capture from Scans.

Solution

The username and password for the backup user is exposed in the backup.py file.

flag{backup123}

Continued On

Escalation