180010027
/
CSICTF-Writeups
1
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity
CSICTF - By Computer Society of VIT is one of the finest CTFs hosted by India.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
9 Commits
1 Branch
0 Tags
6.5 MiB
 
 
Branch: master
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from 'master'
${ noResults }
CSICTF-Writeups/Forensics/unseen
rishitsaiya 3c743dd8fd
Added Forensics Challenges 		4 years ago
..
Flag.png Added Forensics Challenges 4 years ago
Morse_Decode.png Added Forensics Challenges 4 years ago
README.md Added Forensics Challenges 4 years ago
flag.txt Added Forensics Challenges 4 years ago
morse.wav Added Forensics Challenges 4 years ago
nyc.png Added Forensics Challenges 4 years ago

README.md

unseen

The main idea finding the flag is using LSB bit and steghide tools.

Step-1:

After I downloaded nyc.png & morse.wav, I tried basic binwalk and strings, but obviously it didn't work.

Step-2:

I tried to decode morse.wav online here.

Step-3:

This message gave me idea that I have to search further in image only. Using the LSB hint from the description, I found the string 42845193 at 1-bit LSB.

Step-4:

Using Steghide tool, I tried to extract data from the morse.wav by command steghide extract -sf morse.wav Passphrase was 42845193

It gave me this output:

wrote extracted data to "flag.txt".

Step-5:

Something to work on. So when I opened flag.txt. It was blank with space, tabs and newline. So I tried to decode that using Whitespace Decoder at : https://vii5ard.github.io/whitespace/

Voila! I had the flag there.

Step-6:

Finally the flag becomes: csictf{7h47_15_h0w_y0u_c4n_83c0m3_1nv151813}