Router Firmware Unpack & String Hunt
network · medium · +45 XP
Target
GET /api/lab/router-firmware-101/binwalk (mock binwalk output)
GET /api/lab/router-firmware-101/extract?offset=... (extracts a filesystem at the given offset)
POST /api/lab/router-firmware-101/submit body {username, password} (returns flag)
Goal: binwalk shows 3 squashfs offsets. Only one contains an /etc/shadow with a usable line. The shadow file has debug:!: style entries — one is debug:$6$...$... MD5'd-crypt of a weak word ('admin', 'debug', 'router'). Submit username + plaintext password for the flag.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/router-firmware-101/
// reuse on the cli
// submit flag
| # | hacker | solved |
|---|---|---|
| 1 | @akadee380 first blood | 2026-09-21 |
5 of 12 · network