ary3ndra/mossadchallenge2019

Mossad Cyber Challenge 2019

- In my opinion, the chance of being accepted into the Mossad by solving a riddle is poured to zero
- for those who come from outside of the Israeli Ministry of Defense.
- I think that only smart people from elite units of the IDF can be accepted (8200, Mamram)
+ But always interesting to try your knowledge ...
+ And you can always submit your CV directly without any challenges at:
 https://www.mossad.gov.il/heb/careers/Pages/default.aspx

Mossad Challenge 2019

To get into Challenges Web Page you need to find IP Address from Image below:

Here is how to I find it:

Here is my video on how to find it: https://youtu.be/T55p6KG1UB0

Challenge-1

1. Download app.apk file from http://3d375032374147a7865753e4bbc92682.xyz/static/app.apk This is Android application, you can install it on your Android device, recommend to use some Android Emulator, and not your main private phone. In your Android you need to enable Install from unknown sources!!!

2. To install application, in your Android device open browser and goto http://3d375032374147a7865753e4bbc92682.xyz/static/app.apk it will start downloading, after download complete, try to open this file from file manager or any other way and Andorid will ask your permission to install.

3. You will see this screen after you launch this app:

Our Client ID# 6711d2ec0d724396ad1570fcfb431443 is our Seed and it's different on every browser, so password also different.

4. I analyzed network packets by using Wireshark which app send during login: As you can see it send POST request to 35.246.158.51:8070

POST /auth/v2 HTTP/1.1
user-agent: iWalk-v2
content-type: application/json; charset=utf-8
accept-encoding: gzip
content-length: 29
host: 35.246.158.51:8070

{"Seed":"ff","Password":"gg"}HTTP/1.1 200 OK
Content-Type: application/json
Date: Wed, 08 May 2019 21:49:05 GMT
Content-Length: 47

{"IsValid":false,"LockURL":"","Time":149646302}

Looks like Destination Host it's API endpoint. You can generate same POST Request to server by using curl command:

curl -X POST -d '{"Seed":"xxxxx","Password":"yyyyyy"}' 35.246.158.51:8070/auth/v2

And get respond with same format:

{
    "IsValid": false,
    "LockURL": "",
    "Time": 158262
}

Source code for API Server located here: https://github.com/iwalk-locksmithers-app/server/blob/master/main.go
In Source you can see that if you will use User-Agent=ed9ae2c0-9b15-4556-a393-23d500675d4b and url is 35.246.158.51:8070/auth/v1_1
Your password will be analyzed char by char and if character is correct, into Time will be added 30 Milliseconds. So longest delay means correct character/password.

This is how to solve it: https://youtu.be/c2hqjVcSiOg

Challenge-2

http://759d8eba52184f538c8a4525680cfb33.xyz/

Not Welcome WebSite: http://missilesys.com/notwelcome
Red Button Image loading from another website.
Can be Welcome WebSite: https://dev.missilesys.com/

You can register and get Certificate to login. Funciton gencsr called from https://dev.missilesys.com/js/PKCS10.js to generate cert.
You will need to update this file to generate Administartor certificate locally.

Import Certificate into your Browser and go to https://missilesys.com/ it will be secured connection right now.
You will get to Administartor Page:

Challenge-3

http://9f96b2ea3bf3432682eb09b0bd213752.xyz/

Challenge-4

http://77756494ba7c0dpv899i45t33zd343td.xyz/

2019 Challenge GAME OVER