Two Path
Description
Logan gave me this image file before disappearing.. I've been breaking my head over it for long Can you decode it?
Author: Rakhul
Downloads: hello.jpg
Solution
└─$ la
Permissions Size User Date Modified Name
.rwxrwx--- 42M kali 5 Aug 22:39 hello.jpgImage file is awfully huge, so first I tried binwalk
└─$ binwalk --dd='.*' ./hello.jpg
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 JPEG image data, JFIF standard 1.01
30 0x1E TIFF image data, little-endian offset of first image directory: 8
1801 0x709 Copyright string: "Copyright (c) 1998 Hewlett-Packard Company"
86856 0x15348 Zip archive data, at least v2.0 to extract, compressed size: 151849, uncompressed size: 152413, name: greenpill.jpg
238726 0x3A486 End of Zip archive, footer length: 22
238748 0x3A49C Zip archive data, at least v1.0 to extract, compressed size: 41267125, uncompressed size: 41267125, name: redpill.jpg
41505892 0x2795464 End of Zip archive, footer length: 22
41506102 0x2795536 End of Zip archive, footer length: 22
└─$ mv _hello.jpg.extracted/3A49C red.zip # <https://youtu.be/zE7PKRjrid4>
└─$ unzip red.zip # Didnt work
└─$ 7z x red.zip # Worked (Showed some errors, but file got extracted)
└─$ la
Permissions Size User Date Modified Name
.rw-r--r-- 41M kali 25 May 2022 redpill.jpg # Again huge image
└─$ binwalk --dd='.*' ./redpill.jpg
DECIMAL HEXADECIMAL DESCRIPTION
--------------------------------------------------------------------------------
0 0x0 JPEG image data, JFIF standard 1.01
68806 0x10CC6 Zip archive data, at least v2.0 to extract, compressed size: 1228, uncompressed size: 175644, name: morse.wav
70073 0x111B9 Zip archive data, at least v1.0 to extract, compressed size: 41196805, uncompressed size: 41196805, name: secrett.zip
41266897 0x275AED1 End of Zip archive, footer length: 22
41267103 0x275AF9F End of Zip archive, footer length: 22
└─$ mv _redpill.jpg.extracted/10CC6 hidden.zip
└─$ unzip hidden.zip
Archive: hidden.zip
inflating: morse.wav
extracting: secrett.zip secrett.zip requires a password, so let's open morse.wav.
We can decode morse using https://morsecode.world/international/decoder/audio-decoder-adaptive.html
The hovercraft is a vehicle that Morpheus uses to travel between the Matrix and the real world. The hovercraft of Morpheus is called the Nebuchadnezzar. It is a heavily modified Sikorsky S-92A chopper that is used by Morpheus and his crew to travel between the Matrix and the real world. The Nebuchadnezzar is equipped with a variety of weapons and sensors, and it is also capable of underwater travel. The name Nebuchadnezzar is a reference to the king of Babylon who was known for his wisdom and power. The name is fitting for the hovercraft, as it is a powerful and versatile vehicle that is used by Morpheus to carry out his mission to free humanity from the Matrix.
Ok, enough backstory. The password should be nebuchadnezzar
└─$ 7z x ./secrett.zip
...
Enter password (will not be echoed): # Enter password
Everything is Ok
...
└─$ la
Permissions Size User Date Modified Name
.rwxr--r-- 55M kali 25 May 2022 deep_secret.wavHmm... Pretty good beats for a challenge, but no secret message, no spectogram... deep_secret... Deep Sound?
Flag: dsc{u_ch053_THE_cOrr3Ct_pill!}
Last updated