April 14, 2022
UMDCTF 2022 Justina 1
This challenge was in my opinion a rather bad one because in order to solve it, a human is needed. You’ll soon see what I mean by that.
Anyway, the challenge provides the following picture:
Yeah, it’s definitely pretty weird, however, for Justina 1 the image is also not that important anyway.
What’s more important is her(?) name, if we enter "Justina Zimmerman" in our google search bar, one of the first results is her Facebook profile where we can find some interesting information.
Except for the private group nothing useful is on there. So, let’s have a closer look at the group. Basically, in order to join, you have to fill out a quiz with a total of 3 questions. These were the questions:
- How do you know Justina?
- What is her favorite singer?
- What is her favorite series?
The last 2 were multiple choice quizzes, while the first one was a text input field. To be honest, I have no idea where you could have gotten the information for this quiz, however, I’m just a master of guessing it seems cause they let me in on first try. These were my answers:
- From a French café
- Justin Bieber
- The Vampire Diaries
So, as it turned out it is completely irrelevant from where you know her as long as it’s not total trash. Now to the weird thing, you had to guess the other two answers. The challenge author said that it’s easily guessable due to her looks (well, I mean they’re not wrong, but it’s a photoshopped picture). You might think this is already pretty absurd, but did you know that the admin of the challenge has to accept you, so there is no automated process behind it which is extremely weird (what if the admins are sleeping, is it unsolvable then?). Luckily, they accepted me after about 15 minutes. In the Facebook group there were many pictures of places Justina had visited. There also was an event with the following event description:
The event’s called "Meetup @ my place" and in here is also the flag for Justina 1.