Step 1 of 7

Base64 is not a lock

The Kubernetes secret that wasn’t

In a capture the flag challenge something is hidden, and your job is to get it out. Every hidden thing here is a flag: a short code shaped like froga{…}. Find it, paste it in, and the step is done. Each flag is made for you alone — a friend’s will not work for you, and yours will not work for them.

This file is a real format: a Kubernetes Secret, where a server keeps its database password. The name makes it sound locked. It is not. The values are Base64, which is an encoding: a way to write any bytes using only letters, digits, + and /. There is no key. Anyone can turn it back.

Tap a value to select it, copy it into the decoder, and decode it.

reports-db-secret.yaml

apiVersion: v1
kind: Secret
metadata:
  name: reports-db
  namespace: production
type: Opaque
data:
  host: cmVwb3J0cy1kYi5pbnRlcm5hbDo1NDMy
  username: cmVwb3J0c19zdmM=
  password: ZnJvZ2F7ZmFsY29uLWxpY2hlbi0xMDU3fQ==

Input

Output

Choose an operation.