Follow along with the video! Once logged into the picoctf.org site, navigate to the following URL:
https://play.picoctf.org/practice/challenge/247?page=1&search=pw
We will need to use a terminal to complete this challenge. Learn how to open the picoCTF webshell here:
https://youtu.be/-TQqJ6i4DMU
The modified code for the level_3_pw_check function is as follows:
def level_3_pw_check():
for pw in pos_pw_list:
user_pw_hash = hash_pw(pw)
if( user_pw_hash == correct_pw_hash ):
print("Welcome back... your flag, user:")
decryption = str_xor(flag_enc.decode(), pw)
print(decryption)
return
print("That password is incorrect")
------------------
HackerFrogs Links
------------------
Livestream Channel:
twitch.tv/theshyhat
Twitter:
twitter.com/theshyhat
Reddit:
https://www.reddit.com/r/hackerfrogs/
Continue this lesson in the app
Install CourseHive on Android or iOS to keep learning while you move.
FAQs
We curate free YouTube courses, organized by category and language — and make it easy for you to track your learning progress.
Yes. Free courses are embedded YouTube videos.
Currently available in English — with Portuguese, Spanish, French, German, and Italian coming soon.
Check ratings, reviews, duration, and description.
All courses include a certificate of participation.
Yes, an account lets you track progress, earn certificates, and save favorites.
We auto-save your watch position so you can resume on any device.