Secrets in robots.txt (PicoCTF 2022 #36 'roboto-sans')

[@AmanPatel-rv2it]

One after another watching and learning and learning

[@davejackson88]

the part where you decrypted that cookie with equals it was amazing

[@bladesvlogs4965]

Good one.

[@vsulli]

When you're using "save" and "finish" at the cmd line in Kali, at the end of your videos is that a script you are running in Kali to document your work for the picoCTF challenge? Is that your custom code for solving all the challenges?

[@siliconrobot6522]

I had the same question until, by chance, I watched one of John videos where he explained the finish script and another one where he explained his save script. They are custom bash scripts he put in "/opt" directory. If I remember correctly, "finish" just changes directory and rename the working folder by adding "_COMPLETE" to it and "save" script is saving the last bash commands he wrote he executed in order to document his work. I created the same "finish" script and I use it every time I complete a challenge, but I don't remember how to make the "save" script, probably uses history bash command with tee and command to select a number of last commads.

[@goodboy8833]

Hi John, did u know u cyberchef has ctf challange, open cyberchef just open dev console u can see ctf challenge.

[@chadgomez8508]

your vids r awesome and educational

[@MrNederlande]

Great video thanks

[@ThushyCyber]

super JH

[@itogi]

nice

[@g_68sreemanpattanaik63]

How did u know that u have to access the robot.txt page

[@g_68sreemanpattanaik63]

@@khairulikhwanbinbadruddink6591 means?

[@dsomods]

The challenges name is "Roboto Sans" and from this wording you could have thought of the robots.txt file

[@singhjidj2798]

Hello brother please please help me for getting a website admin panel

[@CA-FE-C0-FF-EE-00]

What do you use for the save and finish? Would love to also have it for the get flag scripts

[@angryman9333]

you couldve done CTRL + F and searched that way for all the content in that page..

[@fastnewstvlive]

dustbin of advertise

[@synack2165]

Good video...as always! Thanks for all the good content. I have learned so much from you. I had a question about this one. Could you have used the base code 64 in the URL e.g. /anMvbXlmaWxlLnR4dA== instead of /js/myfile.txt. I would imagine it would still have worked right or do you need to have the decoded form used in the URL? If you could clarify that I would appreciate it. Thank you!

[@goodboy8833]

Hi John, did u know u cyberchef has ctf challange, open cyberchef just open dev console u can see ctf challenge.