Home HackyEaster 2015 Egg 11: You've got mail
Writeup
Cancel

Egg 11: You've got mail

Challenge:

You caught a Thunderbird mail box, which contains an easter egg. Go find it!

file

Solution:

In the Inbox file we see an email with a reference to a password in it:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
From - Mon Sep 29 21:16:37 2014
X-Account-Key: account1
X-UIDL: GmailId148c2d6dd5085bb9
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
MIME-Version: 1.0
Received: by 10.140.18.225 with HTTP; Mon, 29 Sep 2014 12:15:34 -0700 (PDT)
Date: Mon, 29 Sep 2014 21:15:34 +0200
Delivered-To: hackyeaster@gmail.com
Message-ID: <CAPPJap-OsLRmw93yqBDw5yOFQghqMjMfMBYyJ1gZiueCkFZgwg@mail.gmail.com>
Subject:
From: Hacky Easter <hackyeaster@gmail.com>
To: Hacky Easter <hackyeaster@gmail.com>
Content-Type: multipart/alternative; boundary=001a113a961850ddac05043917f7

--001a113a961850ddac05043917f7
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi Hacky,

here's the p4ssw0rd, as discussed:

is=C3=A4rdragare

Please keep it s3kr3t!

Regards,
               Dr. Bunny C. Easter

and an email with a base64-encoded zip file named signature.zip as attachment.

We convert the base64 string (for instance here), and get the following zip file. We open it (and don’t even need a password), to find our egg:

Flag

lZkG3aWzrpYrIWoBX5Kz