Files
2026-10-19 14:59:45 +02:00

29 lines
2.0 KiB
Markdown
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Back to Basics
**Category:** Aurora Patient Zero
**Points:** 15
## Description
\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/aurora_patient_zero.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
\<sup>Created By: \<code>@G2Gh0st\</code>\</sup>
\<style>
.tiny-text {
font-size: 6px;
color: #1a1a1a;
}
\</style>
\<span class="tiny-text">flag{1_l0v3_AI}\</span>
​‌‌​​‌‌​​‌‌​‌‌​​​‌‌​​​​‌​‌‌​​‌‌‌​‌‌‌‌​‌‌​‌‌‌​​‌‌​​‌‌​​​​​‌‌​‌‌​​​‌‌‌​‌‌​​​‌‌​​‌‌​‌​‌‌‌‌‌​‌‌​‌‌​‌​​‌‌​​‌‌​‌​‌‌‌‌‌​‌‌​‌​​​​​‌‌​‌​​​‌‌‌​​‌​​‌‌​​‌​​​​‌‌​​‌‌​‌‌‌​​‌​​‌​‌‌‌‌‌​‌​​​​​‌​‌​​‌​​‌​‌​‌‌‌‌‌​‌‌​​‌​​​​‌‌​‌​​​‌‌​​‌​​​‌‌​​‌​​​‌‌‌‌​​‌​‌‌‌‌‌​‌
For this task, you need to continue your examination of the Aurora Patient Portal application.
Now we know how DEADFACE is able to collect all this information, but now we would like to deploy some network monitoring to ensure we know everything they are doing. There is a hidden diagnostic page built into the app. Using ALL the possible data that you were able to collect so far, see if you have search for the name of the gateway server the app is using to communicate back to Aurora's servers.
Submit the result as the flag. Use the format `deadface{gateway-name}`
## Services
- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)