write-ups-challenges-2019-2020/Shrek-is-back
2022-11-24 22:43:03 +01:00
..
.gitkeep initial commit 2022-11-24 22:43:03 +01:00
README.md initial commit 2022-11-24 22:43:03 +01:00
script initial commit 2022-11-24 22:43:03 +01:00

CHALLENGE Shrek is back

A forensics-type CTF challenge

Description

I want Mike Myers to put his signature on this beautiful peace of art, but I can't seem to open it... Apperently there also is a flag in this image.

Flag

IG{GeT_ShReKeD}

Given files

  • script.jpg The file is corrupted, by extend gitlab doesn't want to upload it as .jpg.

How the challenge works

The image is actually a docx-file. The file signature has been replaced by X's, because of this it won't open in any way (invalid hex file). The most conventional way to solve is as following:

  1. remove X's from the file
  2. apply strings (now you see it is a docx-file)
  3. find file signature online: 50 4B 03 04 14 00 06 00
  4. set file signature, open in Word/Writer
  5. flag is in image on last page of the file