FANTASY CTF picoCTF 2025 Solution

Description

1. Step 1Introduce yourself

   Observation

   The description asks you to pick the right dialogue options to prove you belong. The server presents a menu, and agreeing to the competition rules is what opens the next step.

   Press Enter repeatedly through the opening exposition until the first prompt appears. Choose option A to confirm you agree to the competition rules.

   Learn more

   Netcat (nc) is a networking utility that reads from and writes to network connections using TCP or UDP. It is often called the "Swiss Army knife of networking" and is used in CTFs to connect to challenge services that present interactive text-based interfaces. The basic syntax nc hostname port opens a raw TCP connection where you can type input and see server responses.

   Many CTF challenges use netcat-based interactive programs to test that participants understand the rules of the competition, agree to terms, or demonstrate basic interaction skills. These introductory challenges serve as a warm-up and ensure that everyone knows how to connect to challenge services - a prerequisite for every other netcat-based challenge in the competition.

   If netcat is not installed on your system, alternatives include ncat (from nmap), socat (more feature-rich), or even Python's socket module or pwntools' remote() function. On Windows, PowerShell ships Test-NetConnection for basic connectivity tests, but it cannot hold an interactive session, so netcat itself still needs to be installed separately.

2. Step 2Respond to the teammate

   Observation

   The server walks a state machine, so a second round of prompts follows the first agreement and wants the same answer.

   Press Enter through the next dialog block until the next Choose an option: prompt, then select option A again. If the server doesn't respond to your input, you're probably not in the state you think - check the last prompt you saw before typing.

   Learn more

   Interactive text-based programs sent over TCP often implement simple state machines: the server sends a prompt, waits for input, transitions to a new state based on what it receives, and sends the next prompt. The practical debugging consequence: when the server stops responding, scroll your tee log up to the last prompt the server printed. That tells you exactly which state the server thinks it's in, and therefore what input it's actually expecting.

   In security competitions, rules challenges like this one typically cover important policies: no attacking competition infrastructure, no sharing flags with other teams before the competition ends, no automated scanning of non-challenge systems, and respecting rate limits. These rules protect both the infrastructure and the fairness of the competition for all participants.

3. Step 3Receive the flag

   Observation

   The setup pipes all output through tee into fantasy.log, so grep that file rather than trusting terminal scrollback.

   A short mini-game appears next, but the script awards the flag automatically (no skill required). Grep your tee log for picoCTF{ to pull it out cleanly.

   bash

   grep -o 'picoCTF{[^}]*}' fantasy.log

   Copied!

   Expected output

   picoCTF{m1113n1um_3d1710n_76b68...}

   What didn't work first

   Tried: Scrolling up in the terminal instead of grepping the tee log to find the flag

   Terminal scrollback is finite, and the flag line may already be gone. fantasy.log holds the complete output, so grep finds it however much text came before.

   Tried: Running grep 'picoCTF' fantasy.log without the -o flag to extract just the flag token

   Without -o, grep prints the whole matching line, story text and all, wrapped across several terminal lines and awkward to copy. With it, you get just the match.

   Learn more

   Terminal scrollback buffers store lines that have scrolled off the visible screen. In most terminal emulators (Terminal.app, GNOME Terminal, Windows Terminal, iTerm2), you can scroll up to see past output, search through it with Ctrl+Shift+F or similar shortcuts, or increase the scrollback limit in settings. For very long outputs, redirecting to a file with nc host port | tee output.txt ensures you never miss anything.

   The tee command writes to both standard output and a file simultaneously - useful when you need to see a live stream but also want a permanent record. This technique is helpful throughout CTF competitions: any time you collect output from a challenge service that you might need to reference later, piping through tee saves it automatically.

Flag

The exact number of Enter presses can vary slightly, but choosing option A both times is sufficient to finish the interaction.