apk multi tool download capable of baksmaling

However, requesting downloads a copy of a password protected.

Visiting shows a copy of the business card. A screenshot containing the filename “SantaGram_v4.2.zip”.Zooming into the picture gave the following clues: This account contains a picture of a messy desk. Not having a ZIP file on hand, I investigated the Instagram account referenced on Santa’s business card. The next question asks to determine “what is inside the ZIP file distributed by Santa’s team”.

Looking at the tweets in a text editor reveals the secret message “BUG BOUNTY” in ASCII art. I wrote this Python script to download and store all the tweets from the Twitter feed to get a better understanding of what the tweets might mean: import tweepyĪuth = tweepy.OAuthHandler(consumer_key, consumer_secret)Īuth.set_access_token(access_token, access_token_secret)Īpi.user_timeline, id='santawclaus').items(400):Īfter the script runs, we are left with a list of tweets. Looking at the Twitter profile from the business card, we find tweets that appear to contain random words: The first question asks us to find the secret message in Santa’s tweets. His business card is the only clue we have: In the story for this challenge, Santa has been abducted and we need to rescue him.

I’ve split up my write-up according to those parts. This year’s contest consisted of 5 parts, each with their own challenges. I first want to extend thanks to Ed Skoudis and the SANS team for always putting together a polished, fun challenge that never fails to teach something new. The challenges have been very polished, and this year is no exception. I always enjoy participating in the Holiday Hack Challenges, and have written about my solutions in the past. These challenges are a great way to learn new and useful exploitation techniques to solve fun puzzles. Duo labs January 9th, 2017 Jordan Wright SANS Holiday Hack Challenge Write-UpĮvery year during the holiday season, SANS publishes their annual Holiday Hack Challenge.

Apk multi tool download capable of baksmaling