> For the complete documentation index, see [llms.txt](https://ctf.zeyu2001.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf.zeyu2001.com/2021/midnight-sun-ctf/backups.md).

# Backups

RSA factordb attack

## Problem

The backup of the home directories might contain too much information.

{% file src="/files/-MYANrSf3xgmepNK8SUk" %}

## Bob

Factordb attack worked.

`backup ~/Tools/RsaCtfTool/RsaCtfTool.py --publickey bob/.ssh/authorized_keys --private`

![](https://3167364547-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX1bWRlBzHpEPe1TYDD%2Fuploads%2Fgit-blob-3c9a1a3ec44865842d2becc21ba5f9323134b981%2F57174126567043cda6f3da7cebc77c8b.png?alt=media)

```bash
$ chmod 600 .ssh/id_rsa
$ ssh -p2222 -i .ssh/id_rsa bob@backup-01.play.midnightsunctf.se
midnight{Turn_electricity_t0_h347}
```

## Alice

Same thing for the first key, alice\@work.

![](https://3167364547-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX1bWRlBzHpEPe1TYDD%2Fuploads%2Fgit-blob-fb2b90348bdccfbb0915607f663a088103ab195b%2Fe56e8184dd04437bb81459862d1cc742.png?alt=media)

```bash
$ chmod 600 .ssh/id_rsa
$ ssh -p2222 -i .ssh/id_rsa alice@backup-01.play.midnightsunctf.se
midnight{factorization_for_the_Win}
Connection to backup-01.play.midnightsunctf.se closed.
```