Adobe Payroll

We've forgotten the password to our payroll machine. Can you extract it?

• Download: neverlan2020_adobe-payroll.7z

Recon

The 7z file contains a directory with the file Adobe_Employee_Payroll.exe, which seems to be a .NET file.

$ file Adobe_Employee_Payroll.exe 
Adobe_Employee_Payroll.exe: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

We loaded it into JetBrains dotPeek and found a checkPassword() function which contained the credentials admin/bmV2ZXJfZ29ubmFfZ2l2ZV95b3VfdXAh.

We used these credentials to login in the app and we got a popup with the flag.

Flag

flag{.net_is_pretty_easy_to_decompile}