The flag I found didn’t work, either. Even downloaded the zip a couple more times. Will take another look and see if I found it via an unintended route where they old flag may have been left over, but should all be functional here now with the current zip file hosted at HTB?
I believe I’m also getting the ‘old’ flag as of today after working with the file from a few days ago and re-downloading today.
Thanks for the challenge @0xdf, interesting vector.
If anyone is stuck, check @GlenRunciter link, and remember that you can pretty much modify anything to suit your needs, doing everything by hand may be too painful
this challenge should be ‘easier’ rate now that there are tools out there to modify the ‘flag’ easily?
love this challenge though, so real. thanks @0xdf.
for some unknown reason, my libreoffice was messing up with the formulas. Not sure why, so I opened it on a Windows VM using Excel, saved the not visible thing as tabulated text, and then wrote a python script to process and de-obfuscate the thing. After that, the flag just appeared.
hmmmm… I did some basic stuff with the .xls-file and I think I found the 2nd part of the flag. Could it be or is that a rabbit hole? Submitting HTB{MY_FINDINGS} doesn’t work
Edit: nvw. Found the flag. Cool challenge. But I don’t know, whether my way was the best solution or just “luck”
Wow i didn’t you could do such nasty stuff with an Excel spreadsheet. What a nightmare to analyze, but ultimately i got it. I’m sure it was even more painful to put together so well done 0xdf for this challenge!
Certainly an interesting challenge. Working out that last step isn’t so bad, just work backwards. I didn’t have any joy using herusitcs or automation, I had to do it the hard way.
I have decoded so far to an actual powershell script and I am stumped and I see partial pieces of the flag but looks to be scrambled. Any guidance would be appreciated.
(Sorry Wrong Thread was meant for EMO challenge)