Well, I guess I vibe code now LOL. Ayman Boumait asked me to look at TryHackMe Advent of Cyber Day 5 challenge. One of the bonus questions asks:
“Bonus Task: Want to go even further? Using the /parents/vouchers/claim endpoint, find the voucher that is valid on 20 November 2025. Insider information tells you that the voucher was generated exactly on the minute somewhere between 20:00 – 24:00 UTC that day. What is the voucher code? If you want to check your answer, click the hint on the question.”
Never used UUID’s before so was pretty new to me…good learning experience.
I used ChatGPT to generate a python script to generate UUID payloads for the time frame they indicate and quickly realized that two UUID’s for the same time stamp will be different on two different computers so I had to modify the script to use the THM machines MAC address and clock sequence (for the random bits).
The script will generate the payloads you need to brute force the request in Burp Suite and you can just use the grep functionality in Burp to match on the date they ask for. It worked out pretty well.
https://github.com/rflemen/python_code/blob/main/thm-uuid-aoc-day5.py
