credstuff picoCTF 2022 Solution

Description

1. Step 1Map the username
   grep -n "cultiris" usernames.txt shows the account at line 378. Because both files are line-aligned, that same line number in passwords.txt holds the encrypted secret.
   bash

   grep -n cultiris usernames.txt

   Copied!

   bash

   paste usernames.txt passwords.txt | grep cultiris

   Copied!
   Learn more

   Credential dumps (or "combo lists") typically ship as paired text files: line N in usernames.txt matches line N in passwords.txt. grep -n prints the line number alongside the match, which is what links the two files together.

   For one shot, just paste them: paste usernames.txt passwords.txt | grep cultiris joins the columns side-by-side and shows you the user and their cipher in one row. Same idea as zip() in Python. Saves you from manually sed -n 'Np''ing on the password file.

   The root cause of this challenge: passwords were stored in plaintext (or trivially reversible) on the server. Real systems store a salted slow hash (bcrypt, scrypt, Argon2). When the dump leaks, attackers must crack each hash one by one instead of reading off the password directly. Cracking workflow in Hash Cracking for CTFs.

2. Step 2Retrieve the password entry
   sed -n '378p' passwords.txt prints cvpbPGS{P7e1S_54I35_71Z3} - a substitution that still looks like the picoCTF format.
   Learn more

   How to recognize ROT13 visually: the ciphertext preserves word boundaries, punctuation, and case, and the prefix cvpbPGS has the same shape as picoCTF (4 lowercase + 3 uppercase). Each character is shifted by 13: p -> c, i -> v, c -> p, o -> b. Once you spot a flag-shaped string with the wrong letters, count the shift on one or two characters and ROT13 falls out. More cipher-spotting tactics in CTF Encodings.

   sed -n 'Np' is the shortest way to print line N. Alternatives: awk 'NR==N' or head -N file | tail -1.

3. Step 3Apply ROT13
   Running the line through caesar 13 (from bsdgames) or any ROT13 decoder transforms it back into plaintext, yielding the final flag.
   Learn more

   ROT13 is a Caesar cipher with a fixed shift of 13. The mathematical formulation is E(x) = (x + 13) mod 26 where x is the letter's zero-based position (A=0, B=1, ..., Z=25). Because 13 is exactly half of 26, applying ROT13 twice gives (x + 26) mod 26 = x, so the cipher is its own inverse.

   Worked example on the prefix 'cvpb' (where a=0, b=1, ..., z=25):
     c (= 2)  -> (2  + 13) mod 26 = 15 -> 'p'
     v (= 21) -> (21 + 13) mod 26 = 8  -> 'i'
     p (= 15) -> (15 + 13) mod 26 = 2  -> 'c'
     b (= 1)  -> (1  + 13) mod 26 = 14 -> 'o'
   Result: 'pico'  -> matches the expected flag prefix.

   On Linux, caesar 13 (from bsdgames) applies the shift. Other quick methods: tr 'A-Za-z' 'N-ZA-Mn-za-m', Python's codecs.encode(s, 'rot_13'), or any online ROT13 tool. Storing passwords in ROT13 is essentially storing them in plaintext - real password storage requires a slow hash (bcrypt, scrypt, Argon2) with a per-user salt.

Alternate Solution

Flag

Because the files are line-aligned, finding the username index immediately pinpoints the paired password.