AS-REProasting
ad · medium · +45 XP
Target
GET /api/lab/asrep-101/users (with DONT_REQ_PREAUTH flags)
POST /api/lab/asrep-101/as-rep body {username} (returns RC4-encrypted timestamp)
POST /api/lab/asrep-101/login body {username, password} (flag on valid crack)
Goal: find the user where pre_auth=False, request their AS-REP, then crack the RC4-HMAC hash offline. The password is one of rockyou's top 200 (Password1, Welcome1, qwerty, admin123, etc.). On a valid crack the login endpoint returns the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/asrep-101/
// reuse on the cli
// submit flag
// no solves yet