https://app.hackthebox.com/challenges/800

Description

I downloaded a very nice haloween global theme for my Plasma installation and a couple of widgets! It was supposed to keep the bad spirits away while I was improving my ricing skills… Howerver, now strange things are happening and I can’t figure out why…

Exploitation

cat plasma/plasmoids/org.kde.netspeedWidget/contents/code/utils.js
echo 952MwBHNo9lb0M2X0FzX/Eycz02MoR3X5J2XkNjb3B3eCRFS | rev | base64 -d

Summary

Sp00ky Theme: isolate the relevant artifact, decode the evidence, and extract the flag.