Secrets in robots.txt (PicoCTF 2022 #36 'roboto-sans')

Help the channel grow with a Like, Comment, & Subscribe!
❤️ Support ➡ j-h.io/patreon ↔ j-h.io/paypal ↔ j-h.io/buymeac...
Check out the affiliates below for more free or discounted learning!
🖥️ Zero-Point Security ➡ Certified Red Team Operator j-h.io/crto
💻Zero-Point Security ➡ C2 Development with C# j-h.io/c2dev
👨🏻‍💻7aSecurity ➡ Hacking Courses & Pentesting j-h.io/7asecurity
📗Humble Bundle ➡ j-h.io/humbleb...
🐶Snyk ➡ j-h.io/snyk
🌎Follow me! ➡ j-h.io/discord ↔ j-h.io/twitter ↔ j-h.io/linkedin ↔ j-h.io/instagram ↔ j-h.io/tiktok
📧Contact me! (I may be very slow to respond or completely unable to)
🤝Sponsorship Inquiries ➡ j-h.io/sponsor...
🚩 CTF Hosting Requests ➡ j-h.io/ctf
🎤 Speaking Requests ➡ j-h.io/speaking
💥 Malware Submission ➡ j-h.io/malware
❓ Everything Else ➡ j-h.io/etc

[@AmanPatel-rv2it]

One after another watching and learning and learning

[@davejackson88]

the part where you decrypted that cookie with equals it was amazing

[@bladesvlogs4965]

Good one.

[@goodboy8833]

Hi John,
did u know u cyberchef has ctf challange, open cyberchef just open dev console u can see ctf challenge.

[@vsulli]

When you're using "save" and "finish" at the cmd line in Kali, at the end of your videos is that a script you are running in Kali to document your work for the picoCTF challenge?
Is that your custom code for solving all the challenges?

[@siliconrobot6522]

I had the same question until, by chance, I watched one of John videos where he explained the finish script and another one where he explained his save script.
They are custom bash scripts he put in "/opt" directory. If I remember correctly, "finish" just changes directory and rename the working folder by adding "_COMPLETE" to it and "save" script is saving the last bash commands he wrote he executed in order to document his work. I created the same "finish" script and I use it every time I complete a challenge, but I don't remember how to make the "save" script, probably uses history bash command with tee and command to select a number of last commads.

[@chadgomez8508]

your vids r awesome and educational

[@itogi]

nice

[@CyberSecForce]

super JH

[@MrNederlande]

Great video thanks

[@singhjidj2798]

Hello brother please please help me for getting a website admin panel

[@angryman9333]

you couldve done CTRL + F and searched that way for all the content in that page..

[@g_68sreemanpattanaik63]

How did u know that u have to access the robot.txt page

[@g_68sreemanpattanaik63]

@@khairulikhwanbinbadruddink6591 means?

[@dsomods]

The challenges name is "Roboto Sans" and from this wording you could have thought of the robots.txt file

[@CA-FE-C0-FF-EE-00]

What do you use for the save and finish? Would love to also have it for the get flag scripts

[@fastnewstvlive]

dustbin of advertise

[@synack2165]

Good video...as always! Thanks for all the good content. I have learned so much from you. I had a question about this one. Could you have used the base code 64 in the URL e.g. /anMvbXlmaWxlLnR4dA== instead of /js/myfile.txt. I would imagine it would still have worked right or do you need to have the decoded form used in the URL? If you could clarify that I would appreciate it. Thank you!

[@goodboy8833]

Hi John,
did u know u cyberchef has ctf challange, open cyberchef just open dev console u can see ctf challenge.