Not Mossad Challenge - 5780

Introduction:

Someone posted a screenshot and a link from the Facebook page ForeignPublications and a link with a countdown.

ForeignPublications

When the countdown ended a picture was displayed:

welcome

The picture had some what at first appeared to be random text. After a closer look it actually contained interesting information:

AWS_ACCESS_KEY: AKIAQPJDMRJTCZ7BHBVU
AWS_SECRET: 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
DEFAULT REGION: me-south-1

Using awscli (apt install or whatever) we could then connect to an amazon bucket using those details and extract all the files.

$ aws configure
AWS Access Key ID [None]: AKIAQPJDMRJTCZ7BHBVU
AWS Secret Access Key [None]: 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
Default region name [None]: me-south-1
Default output format [None]:

$ aws s3 ls
2020-04-26 22:27:12 mossad-challenge-1.gov.il
2020-04-26 22:27:34 mossad-challenge-2.gov.il
2020-04-26 22:27:48 mossad-challenge-3.gov.il
2020-04-26 22:32:30 mossad-challenge-logs.gov.il
2020-04-26 22:32:31 mossad-challenge2020.gov.il

$ aws s3 sync s3://mossad-challenge-1.gov.il Not-Mossad-Challenge-5780/1
download failed: s3://mossad-challenge-1.gov.il/password.jpg to Not-Mossad-Challenge-5780/1/password.jpg An error occurred (AccessDenied) when calling the GetObject operation: Access Denied
$ aws s3 sync s3://mossad-challenge-2.gov.il Not-Mossad-Challenge-5780/2
download failed: s3://mossad-challenge-2.gov.il/password.jpg to Not-Mossad-Challenge-5780/2/password.jpg An error occurred (AccessDenied) when calling the GetObject operation: Access Denied
$ aws s3 sync s3://mossad-challenge-3.gov.il Not-Mossad-Challenge-5780/3
download failed: s3://mossad-challenge-3.gov.il/password.jpg to Not-Mossad-Challenge-5780/3/password.jpg An error occurred (AccessDenied) when calling the GetObject operation: Access Denied
$ aws s3 sync s3://mossad-challenge-logs.gov.il Not-Mossad-Challenge-5780/logs
fatal error: An error occurred (AccessDenied) when calling the ListObjectsV2 operation: Access Denied
$ aws s3 sync s3://mossad-challenge2020.gov.il Not-Mossad-Challenge-5780/2020
download: s3://mossad-challenge2020.gov.il/apply.txt to Not-Mossad-Challenge-5780/2020/apply.txt
download: s3://mossad-challenge2020.gov.il/Password.gif to Not-Mossad-Challenge-5780/2020/Password.gif
download: s3://mossad-challenge2020.gov.il/password.jpg to Not-Mossad-Challenge-5780/2020/password.jpg

Only mossad-challenge2020.gov.il let us download files:

apply.txt:

Hello Agent-z,

Please apply at: https://www.mossad.gov.il/heb/careers/pages/tech.aspx

Password.gif:

password.jpg:

All done!!