Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Room Icon

CryptoCabana

He never signed the transfer. The place he stashed his secret wasn't as sealed as promised.

medium

60 min

301

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Azure

To solve this challenge, you'll need the Azure installed on your device. If you'd rather work from your own workstation instead of the provided environment, here's how to get it set up:

Once installed, verify it's working with az --version.

Azure CLI via Azure Cloud Shell

Alternatively, you may press the Cloud Details button below to generate your Azure Portal credentials.

Join Lab button inside the Cloud Details modal.

Once done, get the Username (email) and Temporary Access Pass, and log in to the Azure Portal (opens in new tab).

Credentials to access the Azure Portal.

Once logged in, open the Cloud Shell and select Bash.

Starting the Azure Portal's Cloud Shell.

Then, select No storage account required and choose Az-Subs-CTF for the subscription.

Configuring the Cloud Shell access.

Lastly, execute the command below to validate your shell access.

az account show

Validating the Cloud Shell access.

You are now ready to solve today's challenge. Good luck and have fun!

 
 
 
Hacker Holidays · The Byte Lotus Hotel
CryptoCabana
  🐚  
🐚
 
 
 
 
 
 
🌴
🌴
🥥
🥥
🍦
🍹
 
Points
90
Category
☁️ Cloud
Difficulty
Medium
 
🛎️ Concierge Briefing

By the time he made it back from the breakfast buffet, his wallet had already moved on without him. The transaction was signed, properly signed, just not by him.

He'd backed his seed phrase up weeks ago, into the CryptoCabana kiosk's vault — the one whose landing page promised, in exactly four words, “Backed up. Sleep easy.” Somewhere between that promise and this morning, something else got a good look at what was supposed to stay behind glass.

Your objective: find out what the kiosk is quietly trusting to reach into storage on its own, and see how much further that trust actually extends.

🗝️ ROOM ACCESS
Target
https://cryptocabanaf5scjagc.z13.web.core.windows.net/
🏖️ TODAY'S ITINERARY
 Pull apart what the kiosk hands out for free before you've even clicked anything.
 Follow that trust somewhere the kiosk's own page never once points you.
 Somewhere in there is a second, more valuable set of keys — and a vault that won't give up the real values on the first ask.
📸 @0xMia's STORY
  @0xMia · posted after breakfast

"the backup kiosk is SO confident. 'sleep easy' it says 💀 reader, do not sleep easy. also: if a value looks freshly rotated, ask yourself what it looked like five minutes before that 👀"

Cloud Azure Storage Key Vault
Answer the questions below

What is the flag?