Cafe Club

Today our favorite coffee place is back with the hint Brute Force!

First time that a Brute Force attack was actively promoted, so I went looking for something that I could try to brute force.

When looking through the app, I saw the possibility to purchase gift cards. Usually a gift card is a string of random characters, but when I ordered one, I noticed that there was a pretty defined structure. So I bought another one and the structure became clear.

The entire string was always CAFE-2812-A... where the last three characters where different. Ideal to brute force.

I loaded up Intruder with brute forcer, put in the alphabet and made sure all characters where uppercase.

When the results came back, I saw some 200s

And there it was, my well deserved flag! 🇧🇪