Forum Discussion

Nneka_AN's avatar
Nneka_AN
Icon for Silver I rankSilver I
2 months ago

Serial Maze Support Group

Have you been burned by the serial maze? Welcome!  This is a safe space to air out all your serial maze comments, challenges, and anything else. 🙃
challenges
immersive labs
other
Nneka_AN's avatar
Nneka_AN
Icon for Silver I rankSilver I
2 months ago

🙃
Despite finding the 🥒 (Thanks to autom8on for the prompt in the right direction), I'm stumped on how to get to the endpoint 😩
Any more clues from the kind immersers that have already conquered this maze? 👀

  • domel44's avatar
    domel44
    Icon for Bronze II rankBronze II
    2 months ago

    itsdangerous
    token > secret_key > 🥒 > answer

    • jamesstammers's avatar
      jamesstammers
      Icon for Bronze III rankBronze III
      2 months ago

      Do you need to find the secret_key before sending the pickle payload? or use a pickled payload to find it?

      • domel44's avatar
        domel44
        Icon for Bronze II rankBronze II
        2 months ago

        Yes - first finding secret_key 

         

         

        then 🥒

    • sabil10's avatar
      sabil10
      Icon for Bronze II rankBronze II
      2 months ago

      I'm stuck...

      tried deserialization on both move/submit endpoint.. unable to exploit.

      tried rockyou and both endpoint  token .. failed..

      found one endpoint 2257 .. which is asking for secret.. but don't see any parameter to brute force..

      I'm stuck... would appreciate any hints

      TIA