fs0ciety

Platform: HackTheBox | Category: Misc | Difficulty: N/A | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

We believe that there is an SSH Password inside password protected 'ZIP' folder. Can you crack the 'ZIP' folder and get the SSH password?

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. First, unzip the .zip file given.

2. Unzip the .zip file we got.

3. Since we didn't know the password, use fcrackzip.

4. Got the pass, let us unzip it with the pass we got.

5. Strings the .txt file.

6. I noticed that the strings looks like encoded in base64.

7. Let us decode it then.

8. Copy the binaries and paste it on cyberchef.

9. Got the flag!

Flag

REDACTED

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.