Keeber 1
In this challenge we’ll have to use our OSINT skills!
According to the challenge’s description, we need to investigate the Keeber Security Group! The first thing we need to do is find the person who registered their domain.
Next, I googled Keeber Security Group, and we indeed found their company’s website!
In order to find their domain register, we can use whois command.
Wow! we can see the flag!! Let’s pipe it to grep command, so we can see the flag better.
Keeber 2
In the part 2 of Keeber challenge, we need to find their ex-employee from their website!
Let’s head over to their Team page and copy the URL. Then use WaybackMachine to view all of their website’s archive!
Yes!! We found their ex-employee and the flag!
Keeber 3
In the part 3 of Keeber challenge, we need to find their company’s github page, and see are there any secret stuff on their repositories commits.
Let’s use google to find their github page!
Yes!! We found their secret commits, added .gitignore, in their security-evaluation-workflow repository!
Looks like keeber-tiffany uploaded a file called asana_secret.txt and inside the file, it has a key? 1/1202152286661684:f136d320deefe730f6c71a91b2e4f7b1
After I banging my head on this commit. I realized that the file name is a company name! asana.
“Asana is a web and mobile work management platform designed to help teams organize, track, and manage their work.”
Then, I created an asana account to dig deeper what’s the key doing.
Hmm… It’s used for Personal access token. Let’s do some research on their document!
Looks like we can use asana_secret.txt token to authenticate! Let’s use the curl command that Asana provided!
curl https://app.asana.com/api/1.0/users/me -H "Authorization: Bearer 1/1202152286661684:f136d320deefe730f6c71a91b2e4f7b1"
Yes!! We’ve got the flag again!
Keeber 5
In the part 5 of Keeber challenge, we’ll need to find one of the commits which reveals his/her personal email!
Next, I googled github commit email lookup, and I found a solution from Stack Overflow. It said:
“you can add
.patchto the end of the commit url to open patch view.”
Then, let’s check each of their commits one by one!
Finally!! We found the flag from started code_reviews.txt commit!
I didn’t solved Keeber 4, 6-8, so there will be no writeup for those part.