Cyber Talents 2017 Challenges - "LOTR Hero Mania" Solution

LOTR Hero Mania

lord of the rings addict is the user of this application, can you find the creds?, the key is the md5(userpass)

Challenge Link: https://s3-eu-west-1.amazonaws.com/talentchallenges/Reverse/app.apk.zip

Download the APK and decompile it (i use online APD decompiler)

open the java file named MainActivity.java

compare line

if (user.compareTo(MainActivity.this.getUser()) == 0 && pass.compareTo(MainActivity.this.getPass()) == 0) {

getUser function

private String getUser() {
        String resp = this.weezy > 152 ? "Legolas" : "Aragon";
        this.weezy += 100;
        return resp;
    }

getPass function

private String getPass() {
        return this.weezy > 152 ? "Saruman" : "Gandalf";
    }

so the user is Legolas and the password is Saruman

get the MD5 of LegolasSaruman provide the code

we get the code "d710d29360684aef13ea7cdfecf63a3a"