Challenge #3 - What is hidden?
#1
Posted 20 July 2011 - 10:13 AM
I'm not a member of dCTF 2011 Team Reboot, but I dare to start a topic in this forum section. And I give it a title that matches the ones started by Holmes.Sherlock.
What is hidden inside the attached picture? I have to admit that I didn't find it out myself when I ran across it.
Challenge #4 GC1CYGP.jpg 92.82KB 6 downloads
Challenge #4 GC1CYGP.zip 92.95KB 14 downloads
Many Greetings
MichaelZ
EDIT
I just read the last replies to Challenge #2. So I guess the title #3 is not correct. Sorry about it. I changed it to #4.
EDIT2
I added the file also as a zip archive
#2
Posted 20 July 2011 - 10:57 AM
#3
Posted 20 July 2011 - 11:43 AM
One is recognized by graphic programs and shows the picture.
The other one is recognized by e.g. 7zip, and detects an compressed second picture:
Teil 2.bmp 2.35MB 8 downloads
Peter
#4
Posted 20 July 2011 - 11:55 AM
Hi Peter,Looks like the .JPG has two items included.
One is recognized by graphic programs and shows the picture.
The other one is recognized by e.g. 7zip, and detects an compressed second picture:
Teil 2.bmp 2.35MB 8 downloads
Peter
you solved it.
When the file is renamed to .zip it can be opened with any uncompress utility capable of reading zips. Examining this file with a hex editor I didn't notice the zip part.
Many Greetings
Michael
#5
Posted 20 July 2011 - 12:06 PM
If you want, you are welcome as a member of dCTF 2012 as well as Team Reboot. Once u decide, just PM me.I'm not a member of dCTF 2011 Team Reboot, but I dare to start a topic in this forum section. And I give it a title that matches the ones started by Holmes.Sherlock.
No problem, I've changed the title accordingly.I just read the last replies to Challenge #2. So I guess the title #3 is not correct. Sorry about it. I changed it to #4.
#6
Posted 20 July 2011 - 12:09 PM
Hey pscEx,Looks like the .JPG has two items included.
One is recognized by graphic programs and shows the picture.
some one, some day, some where told me
Who can he be?If you see me half in the team, please exclude me.
#7
Posted 20 July 2011 - 12:18 PM
#8
Posted 20 July 2011 - 12:28 PM
Maybe because it is actually Rar compressed ....Examining this file with a hex editor I didn't notice the zip part.
Check at offset 0x85DD .
Wonko
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users