CTFlearn-Writeups/Forensics/WOW.... So Meta/README.md

1570 lines
12 KiB
Markdown

## WOW.... So Meta
The main idea finding the flag is just basic Forensics Techniques.
#### Step-1:
After we download `3UWLBAUCb9Z2.jpg`, I found nothing in image in general.
<img src="3UWLBAUCb9Z2.jpg">
#### Step-2:
I used `strings 3UWLBAUCb9Z2.jpg` to explore if I found any flag in there.
I got following output:
```
JFIF
xPhotoshop 3.0
8BIM
164555
20141227
20141227
164555
8BIM
~Exif
Photos 1.5
2014:12:27 16:45:55
0221
0100
2014:12:27 16:45:55
2014:12:27 16:45:55
http://ns.adobe.com/xap/1.0/
<?xpacket begin="
" id="W5M0MpCehiHzreSzNTczkc9d"?>
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreateDate="2014-12-27T16:45:55" xmp:ModifyDate="2014-12-27T16:45:55" xmp:CreatorTool="Photos 1.5" photoshop:DateCreated="2014-12-27T16:45:55"/>
<rdf:Description xmlns:MicrosoftPhoto="http://ns.microsoft.com/photo/1.0/"><MicrosoftPhoto:CameraSerialNumber>flag{EEe_x_I_FFf}</MicrosoftPhoto:CameraSerialNumber></rdf:Description></rdf:RDF>
</x:xmpmeta>
<?xpacket end='w'?>
1A"Qa
$3Rb
45DSc
'ds
"AQa
$4Cs
,-n9$
XuLG
bnO{
z7RA
hjQ [
B[)a
%q)X
B~8U
%vjK
N~zu
T}ImG
|-M5&
=zM#>@
T.\"
mE'lJ
Y?0Hi
qj-V;t
!%7=={
ZjlH ?9
BMVc
1gxs^
].3]
=.+1
G9D[
Hz`rG1n6
sf_iN
4@HJot
2Q (H
OGJZ
uJac
UG$I
t6*(l
7o%G
HPff
rAm{
]2Xt-/
?&d,
im5=
~,]J
:@K{n
-)\E
E+mA(
9)CJ
`ucO
.p@S!%
y(M
Pnl^i
:wuy/
h4LO
fTO5
L:AHy
Jwu]U
[cUGP
o<<6
e:OC
%W$o|qS(CvGS
S J`,
L&(uQ
GZ t
qs]i
P ~I
xY &
PKeH
DX2(
Hvez
O0fJ
IQmR
ROot
t\]61
-}aD
f+/r
9s5
1dfZ
lRxI
$y&q!
kat:
/$]V
EF$l
-{m}
V+M1
jH U
{)K'p
j**#
PHPQ
I]i$
g'gh
BBln;
P5)Y
@+bL"
[VbT
gZuZ
]KkV
|_\8:
)!$z
tVq;8
,Rzq
YvL
-(GSjj
"-D6
/G2Q
y)QV
n/mC
*8HJm
1>=Jh
<4#/
~}pm>"
T=!z
(*@R/
U>>i,
:|]A
#,B}
xj9!
p];u
,|D.
`q19A\
[7 ;
GqL"
%a)JP
Url^\4
*+$l
]m\lpu
/{b_
7CNg
A $Z
-H'I
/q&AJ
s%g[
'SeV
SkIRP
J}zL
7Wsr(
Q[zd
kc}@
CtM3
u$l0
"5),
'Kk]
*qe'
%0[*B.
z(np
aC:;&
NuvR
RIpiI
,/n
!Nyyc
i@,\y
o|3$
9hJw
n=p@
'S*W
7 [|%PqK
|q'd
Bp.P
nIT9
'Cj4
mSO
+.;Mj<@
*t)-
-a$r
)C|j
Jb:Z
0`qh
J\>sz
X+[s
m-Dr
(-oA
,Di.
*q#y@
JDIIR
9f`k
CKMII
oKjy
kYV6
J7%V6
Zn7>!
XaZB
->94
J4I|
4V"O
.{hJ
A+t8
aMC_+C
%N5I
:a#GN
/:Uu
@?l(
*B>B
J>#H#
w0(4
Z"\r
C-j
18)E
j3%=
RgTL+
#2cxk
\2Un$(
*:RR]O
Y?2E
zi%%_
4) IV
l18dXI
j]#s
k/&k
LA`U>
,Y)qM(
<mq\N
el2A}
7**z=
ML[\
XKgJ
-G#e
;\X}p
-:}0
<djR
1# '
ZJJXI
:a!aJQ
%K'{[U
DHjjTV
'l&$_a
eeD|c[
Tu @
?LNT
QJfD
6/[3Ny.
g^yq
w[K|
|-lJ
65AIar
ECA,
jo.X
*3'Rc
_Mmo;
+h K
PQO}
>cvY
6T";
\4:n` d
;][_
;B]Qt
+JT:
`JUK
qeWrrU
R<3#
81|P
wW[)(
_Pdq
B<IZ
-}:i
Z;%:
]+Z*+
.OS]
HHHI
b76j
&VkK
[yr]H
"]?&
ysFY
g1%e. 8
67YZ
uNJ|Iz@$
66nV
m,m{
$5Q#
!.Sr
q'ok
[kLx
utz=
bXt#QOm
yIUJ/
KgA#
r@mC
r1[`
i*r^
hbu5
;im?
0Osc`>X
y.6C
Kh(.
b<w&
5%n8n
7\gUk
nKIQ
J jB
0\R
6R~7
pM#,
]M A
y)ZS
6 RX
{\ c
.=!N
VZYZ
/I'CC
ZrFcm
~w8>
+S)S
x'Ec/
lZ~Lm
|><"
N~+J
G,Ih
$-s0
Dc0e
i?"-
8{:#
@M Kee
zlgc
L.<d
Kv=}q[sfD
KO%)
j:*m
kG%.
p{b.
ePd:
"0{P
I3b&m4CU9
C|8S`
k|F#
'~l&lo
bn{`FU:
,lTX}
,dFvE
77*S%K_
yO/CmNT
-""7y
>$Dh
(jxC
(,ZLZ
<I%Z
b@~l
<)!<
Qp?M
cEKG
q1ef))I
-jM#
\Z+H
:9@NR
cl&^_q
4~\w
F5s-
f/ES
]:+:
MEKN
xCSp
cxmL9'
N %M9
wPr:
ps8g
1.5>ZyI
@!^G}
*G55
U7=v
rbG
PekV
`x.j$
>#TT
AeJ=
*m*+
Lq-2
:"[xF
D~Sk
Vz*a
Cedo{o
6B r
aimhl
5O/b
yF `$
8sc/
1`Xz
.FXX
Tp~"
Nmmd
I9c=H
baC3x
T:+I6
3sQR
Vq~t
N+tN
$(9W2. 5
s"LV
u:/56Iy
KoWIR
SS3/
>M@I
LR~J(
(uIM
k [hG
C.q*s
Vl5FyM
\#z0
1f8iV
I 3y
0F]^
j5 N
P?0m
$!iQ
aTzr
yXItFz
! n#
0{q@zP
r'Fb
],!?
YUZ:
MfBo}.
AS]:d
`sum
=Eh+
K^;.
ZU`~
!Jm\
E4ya
:3HN
.:!$
8ktk
%J6JZiJQ
f&Y,
#d0
,7}V
uvip
!jy
mXhv
4U%i
I$yZ
BTP}v
9amQ
o+)W
(FY**
99/s
ewy-
%{Z5x
fM7"
PyH7JWQu`
y9&G
wy$02
O,_{
F+w(Kit
i)%?
=Oxj
,03k
_( v&r
$`^eg1
+CjO
:"?=
}T^e/_
d{5
1Ic8-
LDqrL
2~h8
l&\%j
~beh/e
L-iD
Gl A8
F]PN
G\Mj
8LRJi
*UI#H
5"jR<
|}@R
HKHqD
;djd
:~7' =N
%.H#
#T&kr
a0iQ$
s|g*
E)X)?
yu;b
wQQ
`'pc
PTnVTI
A/D)m
@i%6P
`9-7
UJt%Y
o|Z2*vs
(RJm[a7
h]!d%
+x.(YD
iiM:
*jHf:
TQe*
Hr1i2
Seqf
%!-Q
qG3Xh
r&-_
z\"Sv
85RO*K
/{dd
W[[eI
Vl"s
?2Ned
)1#)
?rpCp,
D.5d
.V3UE
`!OKCn[pI
OPDm
uA;b-p
y5jK
EF'_7
W:[TrB
irus
=5=
&t=t
37(ji
K+mu
jQ0i
,B)q
Jf4O
(M\3
nnRQ
3,Vc
2]oBh
P"jS
:45(
acOo
[rC-.
W)Y>
-?D8V
%4:=
]L:J(
hs:W
*v;)
H8!5
3Pr7
yI.*
a[s8
EnBU
wXH?
{5RX'
iTSW8
6w4V
p{Mm
KZeLfz
?8TC
IJ}z
0aC
nO!U
d+Y l4
T,Tc%$
H+!KQ
x} o(\
2aiE
jd6F
49{)!W
:(:Kj#
r|X}4
|&^Z
[F4v
#co\5
*,;HS
<eFJ
5Seu
7){/h
%-j7
ul)9
Ib\z
nSO)I
Ru [o
)QZs-U
qu)R
y$/Q7
/tdx
rNzC
(zlE
9(A#}
={2z
d%iH
Fen/pI
) %A
wlZB
#*QS
U)`l.=
6\_>
pz)1W
@=`nK
{C}-+A
|=RBU
84 {\
] |n
<>XT
^Z~=
t-ck
G::D
:Ty
GJn;^
5_`|
Cw+CiQ
B"@J
*pIi
zaBfO
c)Zn"
q:A@
b3Zy
2$%-
Kx%F
Bz};
I(qu
b"RN
t:<@)
h=9G
&7LM
w.E\
vZd
{"LO
KfiF
|0aF
!**X|
QB5Xn
]eN8
O.(J\
6Dfb
^V8>
T*sm
w=7U
b{]:
;B[)P
%JQ$>
M=;o
RR=,S
NylH
=:`i
Go<k)
23dI
QXQN
&lTomA
b3l~
",{&
n\m'E
]J+/
lDxG
$5sb
H~8m*
!Vd.
PqV'
7qm7
y]&[
! %)
Hx'd
Y%I/
e#uKZI
:mBK
PKiu
4<ECo
9[nVnR
<*NZLY
2Ay2
9MDU
fKU$
>UQ.-
X@{/
%An,
EW$Us
YvI[i
Ux ye
)qw'
)nQgM
OH:I
8R"&
c/3S
jO1K|l}
g21%
W5}]
+ChQ
7+=
B%"j
k(jB
qOO!
)w{m
Jm-*
Ga>WP9
(iHiD
I% *H
8qQK
{lvB@.!kJZ
:n:\
%.92]Dy
Lv]r
p i(
=./rz
<V[[:
6&X+H
f;rQ"K
;|4D
[u,(
*PJo
QG\_
oo5e$U
qJ5-
4E!<
*>e-
Z|(y
Y:|A
I #cm
}Ip*
JX.A
XYI*C
J[ii
hl{\Q
>_<>
{Mb*
YJXy`
[cw+t
"|G,N
iu@uZ/s
K[`%
y;M"
=T~J
5l=1
SPA;
V]qJ
lj?M
+%Qy
4W~>C
jJA-:M
8`BYTd
G-!:w
w/"Ou
CCE{
R> r
Qa-"
AJRT
D~kq
ezsLnV
xmEf
ScJ!VK
H7o
g/ie
6q[u
81!%
&;kj
=]r2
[j})
\z\g
)Q7$
-QZR
+E>
'9VJ_
n..4
=X,\
U:3T
ILd:R
7U22q
b4Z]R@e
cpn7%V
\HH
5BEq
p=1$Xf!l
{I?}^i
Qm.hP
iIu2
b;!F
[}Z?
Tv":
!he*
Xn@('
,zkQ
c0]u
8w$(
<ra'
PJH>wR
Za57
FE*&F}R
?)H`
rce4
]U`/~
U-s8
VA\-
OmA)Q
3ZqJ
|Ha$o
[y4U
=.Om
&07u
)N/]
;vPH#
q-<U<gx
S!cW
CLKy'p
zk(h
(JB[% l
J]Xx[
]q.%*
1^Rv
)a~l
7>%X
)'Kr$6
EIUO(
R6H1
zKHHI
|p)=
B} ;}0
MGii
T7-"
w'R\
dI-8
6HJU
A/Z;'
8qC2
DT(o{
\ LNX
ZZl<Dt
*OS{
\pWL(U
]5}@
TIOOw
h yE&
.VTVU
EMOhV
1B`e
;Q=*
1#YM^:
mZG~
YJ\j#
)27*
L`'Cq
ABOT
,mkv
u!)b
ybO}5f
uFZRU S\
((uh
N#$o
H3b2
8tYmk
jpYI
y(JT
lE4iit.K+
S:K*J
Wc}$w
m.i,q
~|"q%
&U6D
H ^I
,'@JI
Hqoi
IqE.
![)V)Ci
)eW\8%2
h%>&P
EN%dt#k
5JeQRae
5XTf
l-zz
2NbzDQ
3Ui2
h) W
#jBlo
&tu{L
_,R)
K $
3E)+
"Hr%
b[iuM
Lm*S
Rlv6
KmF\
JTZd
/@x+P
6f}Mr
.k.0
#`5o
-Dz_1E
-uj{Y
fcN!
n@6m
#knN
h+ZAXu
m`^i
BEW5
U"GP
m6ZB
=>Sf
_,(z
&3,g
}.*#
Kv;o
C,HB
RO\t
ZmmI
:%(R
r}!Q
pIRR
J[[f
G%3v
j|Y/
)S?g,
ikDv
UG7qG
")EIa
A#P
J IV
$FKe
JJO@n
{X|0
- 4u
IJ|Z
K!A-6[
J\ ia
nA+%
&LU/
@miJ
Jj~MA
W9-K
)_mJK
+M@K
rl Rj
Du16J
Y[l}<?<9
Ke[\m
AJ6PXoH
ofr~gZ
5S'8
o27&KWJ
)RIR
-hq;
%%)Jz
m-uY)
7#o?_
{8<H
-*`ku)M
zcSO
E6(d
~;vz
.:mr.}
Zt:u3,e
!H!A
{Xl~x
]+5P
dgHB
Cbl}F (
Jv#a
~Hg:L
U=rQ
PCm'
_[lL
:@r,
e%AF
.=@m
9ar]>
ImW:
x@IF
}^{X`
LZtT
N'f,#<
;PiM1
tjXy
Z#gQ
)IyJ>
jTYt
a!Zop/q
\['Q
9T1=
q"S3
[Is0,
;1n0
A-)A
n<]=7
cp3)L2
>Lti
WP#+
dJJuj
\j.I
l-ajOU
WN^L
8AB%
yC/%
M4ue
\4*e
("8#
[KI@Rj
4Hqi!
;t8i~C^
R-{Y)
BBDu$
rKab
B~xB
w.g
'Y!#
\S6j
Tc%A<
K}l+
\iZR
hfxz"
p/pH
ehJP
$or1
E`{D~u
]@nz
CUq@
rW!H}'
c-Lf
%+[|
/,w'TVb
c-6w
7^oy2
KMI[v
{[K/6
.$j'
NA(jbe:
$|{b
anb
S#Km
9Jj2
Q!.)
*HW4
BuE>
@7*Q7M
LJ<E
@]!"
7RG5
)H*V
6YLV
bnn;u
rE88
*mvH
d'JC
mKPC!
r<*
JJI$
Qeokn-
l9Ln
qquz
dI+wZ
B#(8
XY%Hp
\VY\
(mvu[[B
=5i
tJXh
7Mp4
HLzd
\tiS
P9KC
=DhCV
>{Xos
w KGY@
fJa4
SHp%J
XsK%KK
792_
N!'iM
inT*m8
dX]i)(JA
,5P[
ow b@
yn\I
AiWbL
+{]@^
]NmC0
P}%D
R@.,\
TR<V
;&r_(
H }p
v?"1
Go\"K
V] RT
!ILfV
.)ZT
)"^o
T%OZ
rRgD~
ZciRc
^y*y
*;jO-
47KidY"
0Tr]9RH
#Hz$
XfDp
&3 P
IB\$xT
~Dze2
V=:\
.FL4@
JZ`$$
v@Z4
Cw)3Y
)."<H
.ki[
()i@[e,
h&fX?}.4
eD\%%V
KJI:
a/jF
V&L&
036\W
56lB
t IY)I;[k
VeMB
ix:I
#6bQK
JZi$
Y#Q;
J fH
[W%)
M(TI
m~It
Rz[p
-p[Du
*>$$j
o%@%n
Bc*k
eEv@
:b S
`RS1@
}4Lg
KkzLyH
=KiI@J
"K56f
AIjL[
A6 P=
UH|D
:`eYu
*3J!
3GNd
KICk}
JSo;U
Xi^2
Iq=ll/d
-X%Ct
oD`TTn
BT=V-
TH%^"
Dy;2
OW#d
Bmm:~
-riR
5R(H
n.Sp!S
lz'}
#)NTE8
faf5G
,Jv0)
.MaQ
+b=Q)
PRzu
5567
7"S,
O{\n
q.#]
=*K1G)
RJO]
ZMw+
l=KzdJs
'po}
#`}N
ku(W
f]*L:
*Ai2
{iRy
KqQF
JP.<D
z(nG
ng8MQ
T,vZ
&{WE
Fuu5<
B]:_S
@v:\
O-}.
%=lq
V6=1
t_Sc
\qWC
/J|S
!+Jt
m^"nI$
]klV
Tc4L
;R%GB
pk*Q
Jen
\JOe)!'{
avJH
xs*s
Dq}
s5e,
#JP[
=R,$
6Q70
W+UX
78Q#5
G-FB
=LKo
KSM<
2fdX4Fj
X[,"D
l89 %(
(f,9
.$^;hq
s,ev+j
"4w2
5BM6
) t<
iHHN
1?C2
u)Ss
[ *m
U4T2
K1'9U
$4VI
O.Sr
^Ur\
&IiPXR
AR !"IB
b@H$^
]n-nm*
vMv;
j%LJ
%K $if
KDzk
Ce%:
R3};
Dnn{I
{9W,
\s^\
.$hlO
fbJcH
r(<;M
E1(-
\w3$
JU%e
76cr
/@**
LM!*A
&4JL
QLtT%(+k(
,HHM
3Tj(f<
&~\f=
2; Y)
W(<L
cros
.fL*
VzjZ
\iNw
%(P$o
pA)S
7RPHPI7
>[L8
_K/kPJ
!.F5V
<d,^
/BeH
5%:z
nKiH
JJ7%.0
YB.o
/Rl/
o0FN[rt:$Xh
,Ahn
"]''
H[Mr]
r V*KDgU
Dmju
GQIB
rc8K
jp8}
fJMn
2fG~$
|WSHi
sJ%Td
/~V]
1Uj9
WVl<
w)Wcp@
*Pj5
0H(eOsJ~* _
.%2z[3
+Rms
Nc3%
th#U
-Jr\
of^Hq
W`!C
_ j)F
[.?+\
O\i>
RZK-%KR
C[mV
bJO_
\bJz
'd?u
/L*m
M~5N
#-M<
/)OHuekp
H# T
z,t@t
h />
JqeJ:
%n$hU
6#r0+
#S+t
Z)S-
T JD
5j)!aO
oHiAa)t)J
g(2]Q
RW)Hk
.-*u
/Srv`
\BPT
2~@Nk
\iJe
!V ]D
KZ|CJ
Hy,H+!7
!zA:
}MG`
b9.,I
mr,:4
IYZz
Tni}
^E9R#
*R !6
GP2o
j yc@ J
mi(P&
)J%6
LnfYB
l11`q
Hu2e
&dyM
KaE!%7Q
~eR{
{+Jo
xTI7
Y(xKS}y@
)k!) JT
g6jm
8bo7=
u>|9
CajU
Er,'U1
1TS6
)HKi
TzRd
mIRU
;/S~
6=G\=
5Z{l
IRobE
T*=I0
\9]p
vHHa
h.L7k
}d$:
:Ly+j
GE_{j
mKH;
xg:\
=m|rZ
\iq{
-|hTH
jl=I
BT-k
CtNit
|'l$Z
o,N$
7]YA@
[*q7<
%q[yA
x~2UY
;RiQ
2S1l
(M!.}
[r.w
ZiM0
cV@W-iN
PVVBR
K2Rx
jD5
sf_U
w H8
uKzK
*G1N
\QBSPTI
\Va0Y
Y*[E
'YKJ
Y] O
Yq*N
%VIU
#Z~|
'G@H
x8IXHQ
=A>]q
$@_%
@* =
KjmJ
&T&F&
3(RxAQj
fS"P#
f.Kk
:Kij
$()KB
b/pq
$E[j^
S5b*
9G-fHyg:K
T7Ee,
D{:Z
"0X.
TeSs%~N^
RBulC\
RTw'
ORmlG
HRopA
23m3
A,)n
I+@=h
l\+WB
&Knr9
Jw*Q
b+iHJ[i
*?Ll
?l%+
_Lr*:
^!|-
M%u&
)_\t
S|7U
6'Y9
:kIX
L"[JM
Cvo{X
BuNh
+G2C
J\Qi
Sh$(]
*Jim
i yE'
`;N~;4
?Dc#W8
|!KZR
51"{m
EPvS~
jRBnH
sd9.R
Q7=0c
EBrfU
+/HQ
4(s _A
$Y(@Q
0fxQ
)JRw
UI0k
jA6"
\\nq
@O'{
bMBc
^ T$
=+R^
5raC
PG|"a
b-`F
ZFhv
9Ey@
Er\f
&`FD
7&BVB
OT)Z
6 w8
H}I:
}rmf^\
&;o:
)IJA>
|Z}N\
H{J
A Kn-KJC
u:]9
Hiq_
/bRH
p Q^4
78p]d
xJW}
r>XJTw=
~e|1
N=I%
6; q
hJZCi
IBH [
/Ve;A
g5kH
X3<8
f%q7
u[u*
+@ZHJ
Ww^t
R@rJ
k7Q'u
c0Kv ]
|f3
xOO\k
<lX}
```
#### Step-3:
Finally the flag becomes:
`flag{EEe_x_I_FFf}`