Description
Investigate cron-based automation on the remote server to discover where the challenge metadata is stored.
Setup
SSH to the provided host/port and authenticate with the given password.
Navigate into /challenge and read metadata.json.
ssh -p 49702 picoplayer@saturn.picoctf.net
ekj2GJuiv4
cd ../.. && cd challenge
cat metadata.json
Solution
- Step 1List cron artifactsAlthough the flavor text references cron, the flag ends up in /challenge/metadata.json. Visiting that path is enough.
- Step 2Read the flagUse cat or vim to read metadata.json and copy the picoCTF flag at the top.
Flag
picoCTF{Sch3...44}
Even though cron is hinted, the flag is stored in a static JSON file.