Oceanic - Steganography

Task

The flag is somewhere in the deep.

Solution

We get the following file:

szczygielka@hacks$ file challenge.tar                                            
challenge.tar: POSIX tar archive (GNU)

Let's unpack the archive:

szczygielka@hacks$ tar -xvf challenge.tar 
clue.jpg
peaceful.wav

After unpacking the archive, we get two files: clue.jpg and peaceful.wav. The first one probably shows the ocean:

Let's check this file with exiftool whether it contains any interesting metadata:

There is a string in the Comment field that appears to be encoded. Let's try to decode it using CyberChef:

It turns out that the string was encoded using Base58. The decoded string seems to be a hint for the task:

Let's look at the second file, peaceful.wav. The audio recording contains the sound of waves.

After analyzing the hint contained in the clue.jpg file, as well as the information found on HackTricks, we can assume that another file has been hidden in the audio file, and to unpack it we have to use the DeepSound tool. After uploading the file, we are asked for a password. Let's try to use the decoded hint from the clue.jpg file as a password:

After entering the password, we can see that the peaceful.wav contains the flag.png file:

Let's extract the flag.png file. The file content looks like this:

After checking the strings in the flag.png file, we find the flag:

Flag:

PreviousFlag Hunt! - SteganographyNextREADME - Web

Last updated