26 lines
808 B
Markdown
26 lines
808 B
Markdown
|
# CHALLENGE Shrek is back
|
||
|
|
|
||
|
|
A forensics-type CTF challenge
|
||
|
|
|
||
|
|
|
||
|
|
## Description
|
||
|
|
I want Mike Myers to put his signature on this beautiful peace of art, but I can't seem to open it...
|
||
|
|
Apperently there also is a flag in this _image_.
|
||
|
|
|
||
|
|
|
||
|
|
## Flag
|
||
|
|
`IG{GeT_ShReKeD}`
|
||
|
|
|
||
|
|
|
||
|
|
## Given files
|
||
|
|
* script.jpg
|
||
|
|
The file is corrupted, by extend gitlab doesn't want to upload it as `.jpg`.
|
||
|
|
|
||
|
|
|
||
|
|
## How the challenge works
|
||
|
|
The image is actually a docx-file. The file signature has been replaced by X's, because of this it won't open in any way (invalid hex file). The most conventional way to solve is as following:
|
||
|
|
1. remove `X`'s from the file
|
||
|
|
2. apply `strings` (now you see it is a docx-file)
|
||
|
|
3. find file signature online: `50 4B 03 04 14 00 06 00`
|
||
|
|
4. set file signature, open in Word/Writer
|
||
|
|
5. flag is in image on last page of the file
|