Th3-Un5olv3D-C4s3

300 points

I was the only one who solved this challenge I must flex

Files included:

31MB

Th3-Un5olv3D-C4s3.zip

archive

Open

Zip file

The challenge

Contents of the zip file:

there are a few important files that we need to solve the challenge

shortlisted for clarity

contents of funny.txt

.- -.-. -
-.. ..- -- -... .-.-.-
... ..- .-. ...- .. ...- .
.-.. --- -. --. .-.-.-

eilrahC dna ovarB ,ahplA morf ees uoy sedoc eht gnisu dna ffuPnepO gnisu yrT
On an egg file....

First look

It seems that funny.txt contains some morse code and reversed text, lets try to decode them into something readable:

ACT DUMB. SURVIVE LONG.

Try using OpenPuff and using the codes you see from Alpha, Bravo and Charlie
On an egg file....

funny.txt tells us that the way to solve this challenge is to extract codes from Alpha.jpg, B and Charlie.txt and use the openpuff software to extract the flag from EGG_0285.jpg

Extracting the passwords

Alpha

running exiftool on Alpha.jpg gives us the following output:

$ exiftool Alpha.jpg 
ExifTool Version Number         : 12.40
File Name                       : Alpha.jpg
Directory                       : .
File Size                       : 6.8 MiB
File Modification Date/Time     : 2023:04:25 21:49:58+08:00
File Access Date/Time           : 2023:06:16 12:20:02+08:00
File Inode Change Date/Time     : 2023:06:16 12:20:03+08:00
File Permissions                : -rwxrwxr-x
File Type                       : JPEG
File Type Extension             : jpg
MIME Type                       : image/jpeg
Exif Byte Order                 : Little-endian (Intel, II)
Make                            : samsung
Camera Model Name               : SM-F936B
Orientation                     : Rotate 180
X Resolution                    : 72
Y Resolution                    : 72
Resolution Unit                 : inches
Software                        : F936BXXS2CWB5
Modify Date                     : 2023:04:18 18:57:07
Y Cb Cr Positioning             : Centered
Exposure Time                   : 1/33
F Number                        : 2.2
Exposure Program                : Program AE
ISO                             : 320
Exif Version                    : 0220
Date/Time Original              : 2023:04:18 18:57:07
Create Date                     : 2023:04:18 18:57:07
Offset Time                     : +08:00
Offset Time Original            : +08:00
Shutter Speed Value             : 1
Aperture Value                  : 2.2
Brightness Value                : 0.39
Exposure Compensation           : 0
Max Aperture Value              : 2.2
Metering Mode                   : Center-weighted average
Flash                           : Fired
Focal Length                    : 1.7 mm
Sub Sec Time                    : 570
Sub Sec Time Original           : 570
Sub Sec Time Digitized          : 570
Color Space                     : sRGB
Exif Image Width                : 4000
Exif Image Height               : 3000
Exposure Mode                   : Auto
White Balance                   : Auto
Digital Zoom Ratio              : 1.2
Focal Length In 35mm Format     : 13 mm
Scene Capture Type              : Standard
Image Unique ID                 : E50QLOL00SM
GPS Latitude Ref                : North
GPS Longitude Ref               : East
GPS Altitude Ref                : Above Sea Level
Compression                     : JPEG (old-style)
Thumbnail Offset                : 996
Thumbnail Length                : 45590
XMP Toolkit                     : Adobe XMP Core 5.1.0-jc003
Motion Photo                    : 1
Motion Photo Version            : 1
Motion Photo Presentation Timestamp Us: 2974656
Directory Item Mime             : image/jpeg
Directory Item Semantic         : Primary
Directory Item Length           : 0
Directory Item Padding          : 59
Warning                         : [minor] Fixed incorrect URI for xmlns:MicrosoftPhoto
Lens Manufacturer               : D0ll$H0uS3#
Image Width                     : 4000
Image Height                    : 3000
Encoding Process                : Baseline DCT, Huffman coding
Bits Per Sample                 : 8
Color Components                : 3
Y Cb Cr Sub Sampling            : YCbCr4:2:0 (2 2)
Time Stamp                      : 2023:04:18 18:57:07+08:00
MCC Data                        : 525
Embedded Video Type             : MotionPhoto_Data
Embedded Video File             : (Binary data 4673794 bytes, use -b option to extract)
Aperture                        : 2.2
Image Size                      : 4000x3000
Megapixels                      : 12.0
Scale Factor To 35 mm Equivalent: 7.5
Shutter Speed                   : 1/33
Create Date                     : 2023:04:18 18:57:07.570
Date/Time Original              : 2023:04:18 18:57:07.570+08:00
Modify Date                     : 2023:04:18 18:57:07.570+08:00
Thumbnail Image                 : (Binary data 45590 bytes, use -b option to extract)
GPS Altitude                    : 26 m Above Sea Level
GPS Latitude                    : 1 deg 18' 26.15" N
GPS Longitude                   : 103 deg 47' 19.54" E
Circle Of Confusion             : 0.004 mm
Field Of View                   : 108.3 deg
Focal Length                    : 1.7 mm (35 mm equivalent: 13.0 mm)
GPS Position                    : 1 deg 18' 26.15" N, 103 deg 47' 19.54" E
Hyperfocal Distance             : 0.34 m
Light Value                     : 5.6

We notice one important line that hints towards a password within the output:

Lens Manufacturer               : D0ll$H0uS3#

D0ll$H0uS3# is not a valid Lens Manufacturer, hence we can make an educated guess that this is our password.

Password for Alpha: D0ll$H0uS3#

Bravo

Charlie

Putting it all together

Now we have our 3 codes, the only thing left is to run OpenPuff and extract the flag

Passwords A, B and C

put the code from Alpha into A, Bravo into B and Charlie into C

A: D0ll$H0uS3# B: s3quEn#T14^L C:R3m3B3R-p4sT

Carriers

Add EGG_0285.jpg as our carrier file

Finally

Click unhide and select the destination where u want your output to be

The flag

Finally! After solving the challenge, we get a file called flag.txt

$ cat flag.txt 
HNF23{H4v1ng_fun_y3tSDR2MW5nX?}

woo

flag: HNF23{H4v1ng_fun_y3tSDR2MW5nX?}