Forensics
Last updated
Was this helpful?
Last updated
Was this helpful?
Description
Files can always be changed in a secret way. Can you find the flag?
Solution
Started out with looking at the image and running cat cat.jpg with no results. Then I got something with ExifTool.
putting into cyber chef the License I would get through some magic the flag.
Flag: picoCTF{the_m3tadata_1s_modified}
Description
Solution
One inside of another hmmm. Sounds like binwalk to me. I use the first command of binwalk -e dolls.jpeg and it returns files, which is a good sign. I go to the basic folder and binwalk -e that jpeg (2nd doll). Then the third doll. Then the fourth doll, and inside that one is something different. It is the flag. What a relief.
Flag: picoCTF{ac0072c423ee13bfc0b166af72e25b61}
Description
Solution
By looking at the file signature, it seems we are given a BMP file. Knowing most of you are in Linux, you can't default to that image viewer. The one I would use is imageMagick to view the image. It has a fake flag and it seems there are two parts to this image. One is a negative view of an image and the other one is positive.
Flag:
Description
Solution
Opened in Wireshark and went to Statistics -> Conversations -> TCP (It had 17 so best guess). From there I checked all the streams and of them, only 1 was readable (stream 5).
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Description
Solution
a
Flag:
Matryoshka dolls are a set of wooden dolls of decreasing size placed one inside another. What's the final one? Image:
We found this . Recover the flag.
Can you find the flag? .
I've hidden a flag in this file. Can you find it?
Figure out how they moved the .
Can you find the flag? .
Use `srch_strings` from the sleuthkit and some terminal-fu to find a flag in this disk image:
All we know is the file with the flag is named `down-at-the-bottom.txt`... Disk image:
While you're going through the FBI's servers, you stumble across their incredible taste in music. One you found is particularly interesting, see if you can find the flag!
Finding a flag may take many steps, but if you look diligently it won't be long until you find the light at the end of the tunnel. Just remember, sometimes you find the hidden treasure, but sometimes you find only a hidden map to the treasure.
