Verify

Xavier Jimenez | Dec 17, 2024 min read
Verify

Description

People keep trying to trick my players with imitation flags. I want to make sure they get the real thing! I’m going to provide the SHA-256 hash and a decrypt script to help you know that my flags are legitimate.

Steps Taken

  1. ssh into the machine
  2. ls the directory
  3. run `sha256sum files/* | grep
  4. run `./decrypt.sh files/
  5. Flag: picoCTF{trust_but_verify_e018b574}