# Defcon Quals 2019
## Can't Even Unplug It
![dc](./img/dc.png)
## Difficulty: Easy
## Category: Web( kinda...)
## Writeup:
No CTF's from a month and well now it was time for Defcon Quals. This was the first and only chall which I captured except from the Welcome One(:P).
So this one had all nice and big description n everything including a HINT :)
>Hint: these are HTTPS sites. Who is publicly and transparently logging the info you need? Just in case: all info is freely accessible, no subscriptions are necessary. The names cannot really be guessed.
So everything that was needed to complete this challenge was in the hint. So what I did was scanned the subdomains for other subdomains which was pretty much transparent in the certificate. I used Google's Certificate lookup.>https://transparencyreport.google.com/https/certificates
![dc1](img/dc1.png)
Now the curl gave a pretty output.
![dc2](img/dc2.png)
A 302 ....Huh!...but couldn't find a way to get to the URL. Then an idea of archives stumbled from the moved URL and the Unplugged thing in description.(Maybe the contents of the webpage were archived) **Web_Archives**. Entered the URL there n all there was a OOO{} FLAG. 
>http://web.archive.org/web/20190311064556/http://forget-me-not.even-more-militarygrade.pw/
![dc3](img/dc3.png)
So that was the CA challenge.
Thanks for reading.