Jump to content











Photo

Challenge #5 - What is wrong?


  • Please log in to reply
15 replies to this topic

#1 florin91

florin91

    Frequent Member

  • Team Reboot
  • 197 posts
  •  
    European Union

Posted 20 July 2011 - 07:57 PM

First, I must say this challenge is not made by me. I just posted it because I had fun solving it.

What is wrong with the linked file? Can you find the correct code?

Link: file

Post here the correct answer, and how you discovered it.
I should mention it is puzzle based.

Have fun!

Edited by florin91, 20 July 2011 - 07:58 PM.


#2 DarkPhoeniX

DarkPhoeniX

    Frequent Member

  • Team Reboot
  • 452 posts
  • Location:In the middle of nowhere
  • Interests:Interesting Things
  •  
    South Africa

Posted 20 July 2011 - 08:13 PM

i took a look with my hex editor it seems their is some text an possible descriptions of png but i will need more info on it

#3 florin91

florin91

    Frequent Member

  • Team Reboot
  • 197 posts
  •  
    European Union

Posted 20 July 2011 - 08:22 PM

i took a look with my hex editor it seems their is some text an possible descriptions of png but i will need more info on it


First, use linux file command to find out what type of file it is.
On windows, I do not know, maybe there are alternatives.

#4 DarkPhoeniX

DarkPhoeniX

    Frequent Member

  • Team Reboot
  • 452 posts
  • Location:In the middle of nowhere
  • Interests:Interesting Things
  •  
    South Africa

Posted 20 July 2011 - 08:50 PM

Thanks!
i fond the file command for windows here
(download the Complete package, except sources ,Setup)
Its A .tar file containing Something that looks like a puzzle version QR-codes in .png format
and a file called MJ.lyr, im still looking into what this all means
.lry http://filext.com/file-extension/LYR
i think it migt be a song hidden in the QR code
the song is "Michael Jackson - Black Or White"
i just need a good QR code reader now...

#5 MichaelZ

MichaelZ

    Frequent Member

  • Team Reboot
  • 333 posts
  • Location:Braunschweig, Germany
  •  
    Germany

Posted 21 July 2011 - 05:26 PM

My guess as solution is

30f3845a5c909da91ed9be14c8fb3fda
The downloaded file is a tar file. The nine graphic snippets need a little modification using ones favorite graphic editor and joining them to a new graphic that is a proper QR code. I used bcTester to decode it.

Many Greetings
MichaelZ

#6 Holmes.Sherlock

Holmes.Sherlock

    Gold Member

  • Team Reboot
  • 1444 posts
  • Location:Santa Barbara, California
  •  
    United States

Posted 21 July 2011 - 05:51 PM

What is wrong with the linked file? Can you find the correct code?


florin91, nice to see you here. If you share the code with me, I can incorporate it in the challenge site for people try & verify on their own.

#7 Wonko the Sane

Wonko the Sane

    The Finder

  • Advanced user
  • 16066 posts
  • Location:The Outside of the Asylum (gate is closed)
  •  
    Italy

Posted 21 July 2011 - 06:19 PM

First, use linux file command to find out what type of file it is.
On windows, I do not know, maybe there are alternatives.


Trid:
http://mark0.net/soft-trid-e.html

:thumbup:
Wonko

#8 florin91

florin91

    Frequent Member

  • Team Reboot
  • 197 posts
  •  
    European Union

Posted 21 July 2011 - 06:54 PM

This password I found it too:
30f3845a5c909da91ed9be14c8fb3fda
by solving the puzzle, inverting the black and white colors and using a website to decode QR code.

I still don't know if this is the final password, or images names are hashes that should be brute forced. Or, more plausible, the found key is a md5 hash that holds the password. This is something I do not know, because the challenge is not made by me.

So, I do not think it is a good idea to put this challenge on Team Reboot's challenges website, since I do not know the correct password. And I think it is too late to verify it.

Do you have any idea where I got this challenge from? Any of you?

@MichaelZ: If you found the solution, it would be easy for you to find what my avatar says.
LE: Thanks for thread title edit!

Edited by florin91, 21 July 2011 - 06:59 PM.


#9 MichaelZ

MichaelZ

    Frequent Member

  • Team Reboot
  • 333 posts
  • Location:Braunschweig, Germany
  •  
    Germany

Posted 21 July 2011 - 07:59 PM

I still don't know if this is the final password, or images names are hashes that should be brute forced. Or, more plausible, the found key is a md5 hash that holds the password. This is something I do not know, because the challenge is not made by me.

When I had decoded the QR code, I thought it probably is the hash of a cddb/freedb entry since there were also lyrics in the tar file. I just had time to check this. If there is a further step beyond the posted solution, cddb/freedb is a dead end. Their hashes are much shorter.

Many Greetings
MichaelZ

#10 DarkPhoeniX

DarkPhoeniX

    Frequent Member

  • Team Reboot
  • 452 posts
  • Location:In the middle of nowhere
  • Interests:Interesting Things
  •  
    South Africa

Posted 21 July 2011 - 09:22 PM

I see some one beat me to the punch and uploaded the hash here
http://www.md5this.c...us&city=Nicosia

#11 DarkPhoeniX

DarkPhoeniX

    Frequent Member

  • Team Reboot
  • 452 posts
  • Location:In the middle of nowhere
  • Interests:Interesting Things
  •  
    South Africa

Posted 21 July 2011 - 09:46 PM

one more unusual thing , all the puzzle(.png) files have md5 length names.... :thumbup:
but they are not md5 hashes

#12 Holmes.Sherlock

Holmes.Sherlock

    Gold Member

  • Team Reboot
  • 1444 posts
  • Location:Santa Barbara, California
  •  
    United States

Posted 22 July 2011 - 04:58 AM

................ And I think it is too late to verify it.

We are trying to arrange something.

Do you have any idea where I got this challenge from? Any of you?

dCTF 2011, Challenge #1

#13 MichaelZ

MichaelZ

    Frequent Member

  • Team Reboot
  • 333 posts
  • Location:Braunschweig, Germany
  •  
    Germany

Posted 22 July 2011 - 07:52 AM

one more unusual thing , all the puzzle(.png) files have md5 length names.... :unsure:
but they are not md5 hashes

Probably it's an indicator where to put the pieces of the puzzle (although that's not difficult). Or it is meant to confuse people B)

#14 Holmes.Sherlock

Holmes.Sherlock

    Gold Member

  • Team Reboot
  • 1444 posts
  • Location:Santa Barbara, California
  •  
    United States

Posted 23 July 2011 - 03:23 AM

My guess as solution is

30f3845a5c909da91ed9be14c8fb3fda
The downloaded file is a tar file. The nine graphic snippets need a little modification using ones favorite graphic editor and joining them to a new graphic that is a proper QR code. I used bcTester to decode it.

Can you please explain, especially the QR code part?

#15 DarkPhoeniX

DarkPhoeniX

    Frequent Member

  • Team Reboot
  • 452 posts
  • Location:In the middle of nowhere
  • Interests:Interesting Things
  •  
    South Africa

Posted 23 July 2011 - 05:00 AM

Can you please explain, especially the QR code part?


After you downloaded the challenge give it the extension .tar
Extract the 9 .png images and the .lry file
The .lry contains lyrics of Michal.J's song "black and white"
assemble the puzzle of .png images (should be easy) with your favored image editor(i used Paint.net)
change the image only to black and white,and invert the colors
The product should look like this:
Posted Image
Its a QR code
Using a QR code reader like bctester
the QR gives a answer:
30f3845a5c909da91ed9be14c8fb3fda
This looks like a MD5 and it is being decoded as we speak here

More on QR Codes See This Vidio

#16 Holmes.Sherlock

Holmes.Sherlock

    Gold Member

  • Team Reboot
  • 1444 posts
  • Location:Santa Barbara, California
  •  
    United States

Posted 07 August 2011 - 02:01 PM

My guess as solution is

30f3845a5c909da91ed9be14c8fb3fda
The downloaded file is a tar file. The nine graphic snippets need a little modification using ones favorite graphic editor and joining them to a new graphic that is a proper QR code. I used bcTester to decode it.

It says that the solution is correct.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users