--- layout: post title: "DeconstruCT.F 2021 | Forensic | Mike" date: 2021-10-03 13:37:00 +0700 tags: [ctf, writeup] --- <figure> <img src="https://cdn.discordapp.com/attachments/874145963407720513/894206917239513118/Group.png"> </figure> #### Forensic | Mike (433 points | 11 solves) Challenge Description: ``` Julia has come to you to ask for help. After spending too much time on his computer, Mike has gone insane, but no one knows why. Can you figure it out? Julia would really appreciate it. Here's how his desktop looked like. Weird how his system time doesn't change.. Wrap the flag that you find with dsc{<flag>}! ``` We're given a file (`desktop_wallpaper.png`): <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894613119828107324/desktop_wallpaper.png"> </figure> **Solution:** At first there was nothing strange about this image, but after we investigated that there was a spotify code hidden in it. <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894613491724460133/unknown.png"> </figure><br> Just scanned it in the spotify apps, here we use handphone to scan it and we'll got this: https://open.spotify.com/track/1xpn6acMY1KgOwhL0Sz9su?si=xw_XA2tgQ3aBaUU4xLedCw&dl_branch=1 <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894613932910706738/unknown.png"> </figure> <br> Next clue from the picture, he holds the shortcut from spotify and youtube. we have finished the spotify, and now we going to youtube. <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894614101823733890/unknown.png"> </figure> We using addons youtube comment finder to try greping from the comments, it turns out that the Level Of Concern song itself has 20 certain codes in it. <figure> <img src="https://cdn.discordapp.com/attachments/847311120539844628/894614417562546256/unknown.png"> </figure> <br> The result is the flag, then wrap it in flag format. FLAG : **dsc{LOC-888-481-90TO}**
Last changed by  
 
Sekte Gadeng
412

Read more

DeconstruCT.F 2021 | OSINT | Dora the Explorer

OSINT | Dora the Explorer (474 points | 18 solves) Challenge Description: Hi, I am Dora the Explorer and I love exploring as you know ;) (after all 1+1=0), and I recently found this place which has an a very cool looking street art to it. Plus they posted about it on social media many a times. You all should see this too sometime!!! We're given a file (osint.jpg): Solution: View the given file and check the photo. If we look at the metadata there are locations that we can find.

10/4/2021
DeconstruCT.F 2021 | OSINT | AHF

OSINT | AHF (429 points | 11 solves) Challenge Description: We've been listening and we've heard this group can write decent code (ahem ahem), but what have they been listening to? We're given a file (team.pdf), which contains: Solution: The file provided is nothing strange, so we do a search for they team name (Team AtomHeartFather)

10/4/2021
DeconstruCT.F 2021 | OSINT | Flags...and Flags

OSINT | Flags...and Flags (250 points | 5 solves) Challenge Description: The Co-Founder Of Spike music loves flags, and he loves to hide them in plain sight. Find it! Solution: Do a search and find the account in instagram. We get two account,that is Neil Kavalakkat account and Rithik Jain account, who became the co-founder of spike. But there is nothing interesting in Neil Kavalakkat account, so after we realized in Rithik Jain's latest photo there is a qr code in his hand. Just decode the qr code and get the flag

10/4/2021
DeconstruCT.F 2021 | REV | Scraps

REV | Scraps (150 points | 100 solves) Challenge Description: One of our coders have locked down an application that is scheduled to be released tommorow. Can you unlock the application as soon as possible. Solution: Given an ELF 64 Binary files which can be reversed through static analysis from IDA Decompiler. endbr64

10/4/2021
Read more from Sekte Gadeng
Published on HackMD