RTCP - Web Invaders

Posted on sam. 25 janvier 2020 in CTF

solves : 38

Point : 250

https://jef1056.github.io/

It's a web game using Defold like the mythic Space Invaders. You can try to beat the first level but, even with this achivement, the flag will not appear.

Let's try to inspect all the files downloaded during the game loading :

webinvaders.png

You can use save the page from the browser to wget/curl each file. Let's take the game.arcd0 who is the biggest game file:

$ strings game.arcd0 | grep -i rtcp
rtcp{web
$ strings game.arcd0 | grep -i rtcp -C 3
    sdfdsfsdf
messag
curtain
rtcp{web
_h^ck3r_
0004212}
B!/builtins/materials/gui.

And finally, we got the flag: rtcp{web_h^ck3r_0004212}.