Monday, January 27, 2014

Nullcon HackIM 2014 :: Misc 3

We were given only the following clues
"Find the flag hidden not so deep inside."
and a file which i've re-uploaded here

For music files, usually i will use Audacity to see whether there are hidden clues within.


From the above screenshot, we can see there seems to be 2 audio tracks within 1 .mp3 file.
The 2nd audio track when you zoom in seems like "-" & ".".
Could it be morse code?
Let's extract out and try decoding it.
After extraction of the morse code, it will look like this.

--.-.- --.-.- . -- --- ... . --. -. ...
.. -.... ----. ----- ---.. .- --- .-.- ..-. ..-.
-.. .- --.-.- -. --- .-- . -... --- ..-. ..
However after using the Morse Code translator from http://morsecode.scphillips.com/jtranslator.html

We were given back ??EMOSEGNSI6908AO?FFDA?NOWEBOFI
Doesn't seems like it.
Then i listened to the other track and the music sounded strange as if it's music played backwards.
So i used one of the features in Audacity to reverse the .mp3 file and track 1 sounds better now.

So probably the morse code from track 2 should be read from back to front too.
After reversing the morse code, we got back

--.-.- --.-.- . -- --- ... . --. -. ...
.. -.... ----. ----- ---.. .- --- .-.- ..-. ..-.
-.. .- --.-.- -. --- .-- . -... --- ..-. ..
After using the morse code to text translator, we got back the following.
ILOVEGOA?NULLCON2014ISAWESOME??

So we got a character that are not properly translated
-.-.--
But checking with Wiki, that is equal to !
Therefore, the final answer to this challenge is the following.
 ILOVEGOA!NULLCON2014ISAWESOME!!

cheers
0x4a61636f62

No comments:

Post a Comment