web25 :: Mr. Robot : EKOPARTY CTF 2016

Key Takeaways

All right. Hey, what's up everybody? My name is John Hammond. Welcome back to another video of mine. And this time I want to be showcasing um some simple and small challenges and solutions for the uh Echo Party CTF. Eco party CTF. Uh it's currently going on right now uh Wednesday, October 26th through Friday, October 28th. Uh currently it's Thursday. Um and you can find this on ctfime.org. Take a look at the CTF. I really like it so far. I haven't solved a whole lot of challenges. In fact, not many at all, but it is still a bunch of fun. I am not a robot. So, trees, trees, trees does have trees, too. Okay, cool. So, I want to show off initially the uh web 25 challenge. Super simple, super easy. Like I said, I don't really have a whole lot uh particularly solved. Hopefully, this will increase by the time the competition is over. But I am more excited to see some of the write-ups and see how people have solved other other things. So the web 25 challenge has had a bunch of people solve it because honestly it's not that hard at all. Um the title of the challenge is Mr. Robot and uh the the prompt is disallow it. So this robot and disallow are all hints and references to the common uh robots.ext text file which if you haven't heard of before you can uh take a look at do some research on typically um a website will have a robots.ext file which will limit what web crawlers or bots like Google or other spiders for search engines stuff like that when they try to index or cache your web page wow your website and your web page I had a weird accent there because I was trying to mix those two words um this file robots.ext text can determine, hey, don't try and index or don't try and cache these pages. I want to leave them alone. I want to disallow you as the bot to be able to see them. But it is still like a completely visible like you know like publicly accessible and visible file. So you can on any web page go to the URL and robots.ext and you can see what they're trying to disallow or what they're trying to hide from different kinds of bots or uh webpage checkers. So it looks like it's hiding this this file this static whatever this text file is. So we can go to that location in again the website and hey we get our flag super easy. Echo robot is following us. So again very very simple challenge but I want to showcase it. And uh in case you haven't heard of it the robots.ext file is a common very very common like beginner and basic uh CTF challenge uh and exercise. So yeah, you could totally if you wanted to submit that and get your points for it. I have already submitted it and gotten the the super small, super simple 25 points, but still a nice challenge and uh I'll showcase it and some others in the coming videos. Thanks again, guys.