$ ctf42

Hard_Kept_Secrets

Misc No technique tags yet.
Difficulty Not rated yet

Author: syyntax

Flag format: flag{...}

syyntax mobile app android @syyntax

Created By: @syyntax De Monne Financial has had several security incidents revolving around the latest version of their Android mobile application. Sensitive user data is being compromised left and right. De Monne is unsure how DEADFACE has access to their API. It's too early to tell if they compromised a password -let's first check if there are any hardcoded secrets in the app.

Your task is to recover the internal API token from the APK. Submit the token as the flag. Example: deadface{2GFEwQvPVIMLJmjGYHgKFWkmpuhrjEnSewMrFRyVMEQ=}

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.