← Back to STEG BREAK CTF

UCHIHA'S REDACTED MEMORY

Extract the real flag from multiple base64-encoded strings on a Netlify subpage.

Tools Used

Browser DevToolsBase64 Decoding

Overview

We are given a website: gleaming-mermaid-1067e6.netlify.app. The description hints at finding a sealed truth.

Reconnaissance

Fuzzing directory paths or checking the site structure reveals a subdomain page located at /flag.

Exploitation Strategy

Accessing /flag yields a series of Base64 encoded strings. Decoding them outputs several flags. Looking at the challenge title (Uchiha's Redacted Memory), the real flag is STG{Pr0ud_t0_b3_an_Uchiha}.

Solution Code

# Decode list of base64 values:
echo 'U1RHe1ByMHVkX3QwX2IzX2FuX1VjaGloYX0=' | base64 -d
# Output: STG{Pr0ud_t0_b3_an_Uchiha}

Flag

STG{Pr0ud_t0_b3_an_Uchiha}