Oceanic - Steganography
Last updated
Last updated
The flag is somewhere in the deep.
We get the following file:
Let's unpack the archive:
After unpacking the archive, we get two files: clue.jpg and peaceful.wav. The first one probably shows the ocean:
Let's check this file with exiftool whether it contains any interesting metadata:
There is a string in the Comment field that appears to be encoded. Let's try to decode it using CyberChef:
It turns out that the string was encoded using Base58. The decoded string seems to be a hint for the task:
Let's look at the second file, peaceful.wav. The audio recording contains the sound of waves.
After entering the password, we can see that the peaceful.wav contains the flag.png file:
Let's extract the flag.png file. The file content looks like this:
After checking the strings in the flag.png file, we find the flag:
Flag:
After analyzing the hint contained in the clue.jpg file, as well as the information found on , we can assume that another file has been hidden in the audio file, and to unpack it we have to use the DeepSound tool. After uploading the file, we are asked for a password. Let's try to use the decoded hint from the clue.jpg file as a password:
