ritheachengkh

Side Quest 2 Key 🔑

Clue:

For those who want another challenge, have a look around the VM to get access to the key for Side Quest 2! Accessible through our Side Quest Hub!

https://tryhackme.com/room/attacks-on-ecrypted-files-aoc2025-asdfghj123
https://tryhackme.com/adventofcyber25/sidequest

When I looked at the VM on day 9, I came across an interesting file, .Passwords.kdbx.

clue1

What does the .kdbx file do?

A KDBX file is a password database created by KeePass Password Safe, which securely stores encrypted passwords and login credentials. It can only be accessed using a master password set by the user.

Next, we use keepass2john to extract the password hash and save it to the desktop for cracking.

cd /home/ubuntu/Desktop/john/run
./keepass2john ~/.Passwords.kdbx > ~/Desktop/kdbx.txt

p1s1

john --wordlist=/usr/share/wordlists/rockyou.txt kdbx.txt

p1s2

Go to the Applications menu and find the KeePassXC application.

p1s3

After opening the application, input the password.

p1s4

After that, head to the Advanced tab.

p1s5

In the Advanced tab, you should see sq2.png, which is what we’re looking for.

p1s6

Just open the file, and we’ll get the key.

p1s7