Yorzaren

Categories

Tags

Hey! Minions have stolen my flag, encoded it few times in one cipher, and then hidden it somewhere there: https://mega.nz/file/1UBViYgD#kjKISs9pUB4E-1d79166FeX3TiY5VQcHJ_GrcMbaLhg Can you help me? TIP: Decode the flag until you got a sentence.

File: THE_FILE

Solution:

exiftool Hey_You.png

Theres a warning Warning: [minor] Trailer data after PNG IEND chunk

binwalk Hey_You.png

Theres files binwalk Hey_You.png -Me

cd _Hey_You.png.extracted/

Theres a rar file. unrar x D3EDB.rar

Creating    You_Still_Here                                            OK
Creating    You_Still_Here/Nothing_Here_16                            OK
Extracting  You_Still_Here/Nothing_Here_16/..txt                      OK 
Creating    You_Still_Here/Nothing_Here_1                             OK
Creating    You_Still_Here/Nothing_Here_10                            OK
Creating    You_Still_Here/Nothing_Here_11                            OK
Creating    You_Still_Here/Nothing_Here_12                            OK
Creating    You_Still_Here/Nothing_Here_13                            OK
Creating    You_Still_Here/Nothing_Here_14                            OK
Creating    You_Still_Here/Nothing_Here_15                            OK
Creating    You_Still_Here/Nothing_Here_17                            OK
Creating    You_Still_Here/Nothing_Here_18                            OK
Creating    You_Still_Here/Nothing_Here_19                            OK
Creating    You_Still_Here/Nothing_Here_2                             OK
Creating    You_Still_Here/Nothing_Here_3                             OK
Creating    You_Still_Here/Nothing_Here_4                             OK
Creating    You_Still_Here/Nothing_Here_5                             OK
Creating    You_Still_Here/Nothing_Here_6                             OK
Creating    You_Still_Here/Nothing_Here_7                             OK
Creating    You_Still_Here/Nothing_Here_8                             OK
Creating    You_Still_Here/Nothing_Here_9                             OK
All OK

Check out You_Still_Here/Nothing_Here_16/..txt

https://mega.nz/file/wZw2nAhS#i3Q0r-R8psiB8zwUrqHTr661d8FiAS1Ott8badDnZko

Encrypted??? Or an error.

strings on the original pic

IEND
Rar!
$You_Still_Here/Nothing_Here_16/..txt
Ac]I
https://mega.nz/file/wZw2nAhS#i3Q0r-R8psiB8zwUrqHTr661d8FiAS1Ott8badDnZkoH
You_Still_Here/Nothing_Here_1
You_Still_Here/Nothing_Here_10
You_Still_Here/Nothing_Here_11
You_Still_Here/Nothing_Here_12
You_Still_Here/Nothing_Here_13
You_Still_Here/Nothing_Here_14
You_Still_Here/Nothing_Here_15
You_Still_Here/Nothing_Here_16
You_Still_Here/Nothing_Here_17
You_Still_Here/Nothing_Here_18
You_Still_Here/Nothing_Here_19
You_Still_Here/Nothing_Here_2
You_Still_Here/Nothing_Here_3
You_Still_Here/Nothing_Here_4
You_Still_Here/Nothing_Here_5
You_Still_Here/Nothing_Here_6
You_Still_Here/Nothing_Here_7
You_Still_Here/Nothing_Here_8
You_Still_Here/Nothing_Here_9
You_Still_Here

Check out that link.

File: MIRROR

Get the file

binwalk and extract the files

Check the new image

strings YouWon\(Almost\).jpg | grep {

Looks like a possible flag. Also dont forget (TIP: Decode the flag until you got a sentence.)

Looks like base64

CTF{VmtaU1IxUXhUbFZSYXpsV1RWUnNRMVpYZEZkYWJFWTJVVmhrVlZGVU1Eaz0=)

VkZSR1QxTlVRazlWTVRsQ1ZXdFdabEY2UVhkVVFUMDk=

VFRGT1NUQk9VMTlCVWtWZlF6QXdUQT09

TTFOSTBOU19BUkVfQzAwTA==

M1NI0NS_ARE_C00L

Note: The brackets arent the same/line up but its the flag.

Flag: CTF{M1NI0NS_ARE_C00L)