BugkuCTF_MISC-"Bai Ge's Pigeon", "linux", "Steganography 3"

1. Bai Ge's pigeon

use tools

1. notebook

The title is a file without a suffix, open it with Notepad.

Finally, this looks like FLAG, it should be encrypted

-->Fence password decryption<--

Set the number of words in each group to 3, add the prefix to get FLAG

flag{w22_is_v3ry_cool}

Two, linux

use tools

1. notebook
2. WSL & Kali
3. WinRAR

The topic is tar.gz compressed file of linux

Method One

Mount the hard disk to /mnt

#切换目录
holaas@HolaAsuka:~$ cd /mnt/f/bugkuctf

holaas@HolaAsuka:/mnt/f/bugkuctf$ ls
1.tar.gz  jpg

#解压文件
holaas@HolaAsuka:/mnt/f/bugkuctf$ tar xf 1.tar.gz

holaas@HolaAsuka:/mnt/f/bugkuctf$ ls
1.tar.gz  jpg  test

holaas@HolaAsuka:/mnt/f/bugkuctf$ cd test

holaas@HolaAsuka:/mnt/f/bugkuctf/test$ ls
flag

#打印文件中可打印的字符
holaas@HolaAsuka:/mnt/f/bugkuctf/test$ strings flag
[WI/
xy#^
/media/test
lost+found
game
.Trash-0
flag.txt
.goutputstream-LSCRJY
[WI/
xy#^
[WI/
xy#^
/media/test
info
files
lost+found
game
.Trash-0
game.trashinfo
game.trashinfo.OL1PJY
game
[WI/
xy#^
/media/test
lost+found
game
.Trash-0
flag.txt
lost+found
game
.Trash-0
flag.txt
.goutputstream-3ICRJY
lost+found
game
.Trash-0
flag.txt
.goutputstream-PS93JY
[WI/
xy#^
/media/test
lost+found
game
.Trash-0
flag.txt
.goutputstream-PS93JY
[WI/
xy#^
/media/test
lost+found
game
.Trash-0
flag.txt
.goutputstream-LSCRJY
lost+found
game
.Trash-0
flag.txt
.goutputstream-LSCRJY
[WI/
xy#^
/media/test
[WI/
xy#^
info
files
[Trash Info]
Path=game
DeletionDate=2016-06-27T12:27:37
key{
    
    }
key{
    
    }
key{
    
    feb81d3834e2423c9903f4755464060b}#FLAG在这里
game.trashinfo
game.trashinfo.OL1PJY
game

key{feb81d3834e2423c9903f4755464060b}

Method II

Use Notepad to open the decompressed flag file and
search for the key to find FLAG

key{feb81d3834e2423c9903f4755464060b}

Three, steganography 3

use tools

1. WINHEX

The title is a picture but the display is not complete

. The suffix is ​​still PNG. Most of the picture has been changed in size.
Use WINHEX to change the height to 500 (0x1F4)

flag{He1l0_d4_ba1}

Finish

Welcome to leave a message in the comment area.
Thanks for browsing