Forensics

Glory of the Garden

steganography
picoCTF 2019

17 January 2020

Points: 50

Problem :lock:

This garden contains more than it seems.

Hint :bulb:

What is a hex editor?

Solution :key:

We have a jpg file, given the hint, let’s try hexdump to dump the hex of the file.

hexdump -v garden.jpg

...
00230540  ee ef 53 ae 86 20 31 b8  75 1f 95 14 f7 fb cf f5  |..S.. 1.u.......|
00230550  a2 bb bd ac 96 87 98 e4  d3 b2 e8 7f ff d9 48 65  |..............He|
00230560  72 65 20 69 73 20 61 20  66 6c 61 67 20 22 70 69  |re is a flag "pi|
00230570  63 6f 43 54 46 7b 6d 6f  72 65 5f 74 68 61 6e 5f  |coCTF{more_than_|
00230580  6d 33 33 74 73 5f 74 68  65 5f 33 79 33 62 37 46  |m33ts_the_3y3b7F|
00230590  42 44 32 30 62 7d 22 0a                           |BD20b}".|
00230598

The flag is at the end of the file.

Flag :checkered_flag: 

picoCTF{more_than_m33ts_the_3y3b7FBD20b}