-
Notifications
You must be signed in to change notification settings - Fork 3
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
f7f3b52
commit 2e7c823
Showing
1 changed file
with
269 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,269 @@ | ||
| # [c4ptur3-th3-fl4g](https://tryhackme.com/room/c4ptur3th3fl4g) | ||
|
|
||
| > A beginner level CTF challenge | ||
| ## Translation & Shifting | ||
|
|
||
| Question 1: `c4n y0u c4p7u23 7h3 f149?` | ||
|
|
||
| This is called [leet speak](https://en.wikipedia.org/wiki/Leet), the text is written with modified spellings with numbers | ||
|
|
||
| We have: `can you capture the flag?` | ||
|
|
||
| Question 2: | ||
|
|
||
| ``` | ||
| 01101100 01100101 01110100 01110011 00100000 01110100 01110010 01111001 00100000 01110011 01101111 01101101 01100101 00100000 01100010 01101001 01101110 01100001 01110010 01111001 00100000 01101111 01110101 01110100 00100001 | ||
| ``` | ||
|
|
||
| What is the series of 1's and 0's? This is binary, the "language of computers" | ||
|
|
||
|  | ||
|
|
||
| Question 3: `MJQXGZJTGIQGS4ZAON2XAZLSEBRW63LNN5XCA2LOEBBVIRRHOM======` | ||
|
|
||
| Having an equal sign at the end of the string, it's base32 or base64. | ||
|
|
||
| In our case, we have base32 decoder | ||
|
|
||
|  | ||
|
|
||
| Question 4: `RWFjaCBCYXNlNjQgZGlnaXQgcmVwcmVzZW50cyBleGFjdGx5IDYgYml0cyBvZiBkYXRhLg==` | ||
|
|
||
| And this is in form of base64 | ||
|
|
||
|  | ||
|
|
||
| Question 5: `68 65 78 61 64 65 63 69 6d 61 6c 20 6f 72 20 62 61 73 65 31 36 3f` | ||
|
|
||
| The existence of numbers and characters lower than f points into the direction of hexadecimal | ||
|
|
||
|  | ||
|
|
||
| Question 6: `Ebgngr zr 13 cynprf!` | ||
|
|
||
| You can see in the answer, the form of the character is the same as in the question. | ||
|
|
||
| This ensures that this is a single transform character cipher, it's ROT13 | ||
|
|
||
| ROT13 is an extremely simple cipher where each letter in a phrase is "rotated" 13 times | ||
|
|
||
|  | ||
|
|
||
| Question 7: `*@F DA:? >6 C:89E C@F?5 323J C:89E C@F?5 Wcf E:>6DX` | ||
|
|
||
| This is somewhat similar to the previous one. It's ROT47 cipher | ||
|
|
||
| But instead of using just the letters A-Z, it uses all characters in the ASCII encoding table | ||
|
|
||
|  | ||
|
|
||
| Question 8: `— . .-.. . -.-. — — — — ..- -. .. -.-. .- — .. — — -. . -. -.-. — — -.. .. -. — .` | ||
|
|
||
| If you had an enough experience in forensics, telecomunicate or watch film, you will know it's morse code | ||
|
|
||
| Dots and dashes are used in morse code. | ||
|
|
||
|  | ||
|
|
||
| Question 9: `85 110 112 97 99 107 32 116 104 105 115 32 66 67 68` | ||
|
|
||
| This sequence of numbers could have been decimal or octal. So i tried with base10 | ||
|
|
||
| It's decimal form | ||
|
|
||
|  | ||
|
|
||
| Question 10: | ||
|
|
||
| ``` | ||
| LS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0KLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLS0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLi0tLS0KLS0tLS0gLi0tLS0gLi0tLS0gLS0tLS0gLS0tLS0gLi0tLS0gLS0tLS0gLi0tLS0= | ||
| ``` | ||
|
|
||
| At first, you will see this question quite confusing with a lot of `LS0` and `Li0t` characters | ||
|
|
||
| But notice the equal sign at the end, it's base64 | ||
|
|
||
| Decode the base64, we have a morse code | ||
|
|
||
| ``` | ||
| ----- .---- .---- ----- ----- .---- .---- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- ----- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- .---- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- .---- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- ----- .---- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- .---- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- .---- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- .---- .---- ----- .---- ----- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- .---- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- ----- .---- .---- .---- .---- .---- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ----- ----- .---- ----- ----- ----- ----- ----- | ||
| ----- .---- .---- ----- ----- ----- .---- .---- | ||
| ----- .---- .---- ----- ----- .---- ----- .---- | ||
| ``` | ||
|
|
||
| Converted the morse code, we have | ||
|
|
||
| ``` | ||
| 011001100110010100100000011000000101111101100000001000000110000001100000011001010010000001100010011010000010000001100000011000000110010000100000011000100110000100100000011000000101111101101000001000000110100001100110001000000110000001011111011001100010000001100000010111110110000000100000011000100110000100100000011000000110000001100101001000000110000001011111011000110010000001100000010111110110010000100000011000000110000001100100001000000110001001100001001000000110100001100110001000000110001001100001001000000110100001100111001000000110000001011111011001000010000001100000011000000110010100100000011000100110000100100000011000000110000001100101001000000110000001100000011000110010000001100000010111110110010000100000011010000110100000100000011000000101111101100110001000000110000001011111011001000010000001100000010111110110000000100000011000000110000001100011001000000110001101100101001000000110001101100101001000000110001101100101 | ||
| ``` | ||
|
|
||
| decode the binary: | ||
|
|
||
| ``` | ||
| fe `_` ``e bh ``d ba `_h hf `_f `_` ba ``e `_c `_d ``d ba hf ba hg `_d ``e ba ``e ``c `_d hh `_f `_d `_` ``c ce ce ce | ||
| ``` | ||
|
|
||
| hmm, at this step i think the hint in our previous question, it's rot47 | ||
|
|
||
| ``` | ||
| 76 101 116 39 115 32 109 97 107 101 32 116 104 105 115 32 97 32 98 105 116 32 116 114 105 99 107 105 101 114 46 46 46 | ||
| ``` | ||
|
|
||
| then convert from decimal, we have `Let's make this a bit trickier...` | ||
|
|
||
| Answer: | ||
|
|
||
|  | ||
|
|
||
|  | ||
|
|
||
| ## Spectrograms | ||
|
|
||
| A spectrogram is a visual representation of the spectrum of frequencies of a signal as it varies with time. | ||
|
|
||
| When applied to an audio signal, spectrograms are sometimes called sonographs, voiceprints, or voicegrams. | ||
|
|
||
| When the data is represented in a 3D plot they may be called waterfalls. | ||
|
|
||
| Using Audacity, i have the answer | ||
|
|
||
|  | ||
|
|
||
| ## Steganography | ||
|
|
||
| Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video. | ||
|
|
||
|  | ||
|
|
||
| or you can use `steghide –extract -sf stegosteg.jpg` | ||
|
|
||
| ## Security through obscurity | ||
|
|
||
| the question say that download the file and check it's extension, so it's not a normal image | ||
|
|
||
| i tried with strings command or open with notepad | ||
|
|
||
| that's very clear that 2 flags in our view | ||
|
|
||
|  | ||
|
|
||
| or you can use `binwalk –extract meme.jpg` | ||
|
|
||
| The principle here can be simply understood as a compressed file containing image content and another file | ||
|
|
||
| Of course, information that can be read in plain text will be displayed when using strings. |