The password for Century5 is the name of the file within a directory on the desktop that has spaces in its name.
NOTE: – The password will be lowercase no matter how it appears on the screen.
A dir command shows us a few folders with spaces in their names as well as a file named file.txt.
PS C:\users\century4\desktop> dir
Directory: C:\users\century4\desktop
Mode LastWriteTime Length Name
---- ------------- ------ ----
d----- 7/3/2021 1:15 AM Can You Open Me
d----- 3/2/2021 6:57 PM One Directory
d----- 7/3/2021 1:17 AM Open Me
d----- 3/14/2021 9:11 PM Open Me
-a---- 7/9/2021 6:07 PM 272 file.txt
I Googled how to find files recursively in Powershell which pointed me to '''Get-ChildItem.'''
According to Powershell's Get-Help cmdlet, Get-ChildItem can take a path string and you can specify to search for a file as well as a recursive search.
PS C:\users\century4\desktop> get-help get-childitem
NAME
Get-ChildItem
SYNOPSIS
Gets the files and folders in a file system drive.
SYNTAX
Get-ChildItem [[-Filter] <String>] [-Attributes {ReadOnly | Hidden | System | Directory | Archive | Device | Normal | Temporary | SparseFile | ReparsePoint | Compressed | Offline | NotContentIndexed | Encrypted | IntegrityStream | NoScrubData}] [-Depth <UInt32>] [-Directory] [-Exclude <String[]>] [-File] [-Force] [-Hidden] [-Include <String[]>] -LiteralPath <String[]> [-Name] [-ReadOnly] [-Recurse] [-System] [-UseTransaction] [<CommonParameters>]
Get-ChildItem [[-Path] <String[]>] ---SNIP--- [-File] ---SNIP--- [-Recurse] [-System] [-UseTransaction] [<CommonParameters>]
With the following command we can get all files contained in the century4's home folder recursively.
PS C:\users\century4\desktop> '''Get-ChildItem -Path "C:\users\century4" -file -recurse'''
Directory: C:\users\century4\Desktop
Mode LastWriteTime Length Name
---- ------------- ------ ----
-a---- 7/9/2021 6:07 PM 272 file.txt
Directory: C:\users\century4\Desktop\Can You Open Me
Mode LastWriteTime Length Name
---- ------------- ------ ----
-a---- 8/30/2018 3:29 AM 24 61580 // This is our flag!
file.txt is not in a folder with a space in its name, which leaves us with the file named 61580 as our password.
61580