bash explode

/bin/bash explode

------------------------------------------

THE CTF IS OVER :')

------------------------------------------

TOP 10 WINNERS:

#1 silver_anth -favorite_track=exfiltrate hash

#2 omaru -favorite_track=phase cancellation

#3 sambot -favorite_track=epoch

#4 blinkingthing

#5 kinfolk295

#6 Global Reset

#7 frostymime

#8 Bokonon

#9 1336

#10 itsrelane

------------------------------------------

Do the CTF for fun!

------------------------------------------

bash explode's album 'CTF' is a capture the flag challenge. Every song title on the album is a hint to the challenge. This CTF consists of passive OSINT Recon, Music Theory, Audio Analysis, and a small portion of Network Penetration Testing.

To participate you should purchase the album on bandcamp* (I gotta get this thing on a torrent)
You can also scrape the audio or whatever on any streaming platform, but the compression might screw up some of the challenges*

The only challenge that deals with active penetration testing is related to a database where you will find the credentials via recon. Do your best not to do any other active pentesting activity.

Scope:

------

Recon - any bash explode related social media account, all official accounts are @bashexplode (all accounts are linked at the bottom of this page)
[Nothing before 2022 and nothing after 2023 will be relevant]

Music Theory/Audio Analysis - the tracks on the album

Penetration testing (you'll find creds somewhere, don't brute force it, if you break a server that's a bummer for everyone)

Domains in scope: bashexplode.com, *.mp3.zip, *.wav.zip, *.explode.sh

YOU'LL NEED THIS FOR TRACK 1: PHASE CANCELLATION (I hope the SC compression doesn't destroy it. Click "...More" > "Download File")

HINTS PAGE COMING SOON

ANSWER WALKTHROUGHS COMING SOON TO YOUTUBE

------------------------------------------