Missing openssl for authentication code binary

[ninakisyova]

Hello,

I am working on the last part of Second Degree Black Belt - Part 2 - Using Components with Known Vulnerabilities & Insecure Deserialization.

The thing is in the Challenge Tips and Tricks it clearly says that "The authentication code is stored in a binary", however I looked literally everywhere and there is no such binary. After trying so many things, I finally got a response indicating that there is /etc/commandauth.bin but when I follow the instruction regarding the openssl for the base64 conversion I receive "Certain commands have been disallowed. There is a better way." which doesn't make any sense because the hints say to use this command.

I am working on this for so long and can't seem to find a solution. Please advise!

My university degree relies on this, please.

Many thanks!

[ninakisyova]

Hello,

I just wanted to add somehing. I've managed to create a command using openssl which is not being blocked but when I try it, I receive openssl not found. How is that possible? I am working on the exercises through https://securecodingdojo.owasp.org/ if this matters.