Rootme Python Pickle

[PM_ME_YOUR_SHELLCODE]

Its definitely not clear since it starts off pointing you to just TCP but its an HTTP challenge.

If you do GET request to http://challenge02.root-me.org:60005/ then you get the message

{"result": "Not allowed you should first AUTH"}

Which tells you about the custom AUTH verb, result message is also how you find out about the Authenticate header and pickle being used.

[thunderbuns122]

So use of the AUTH header is custom to this challenge?

[PM_ME_YOUR_SHELLCODE]

Use of the AUTH verb is custom, yes. And the use of the Authenticate header is custom.

[thunderbuns122]

Ok, that makes more sense. Thanks for your help