The Goodest Boy

Challenge:

We found this image on Ghost Town. We think bumpyhassan hid some information here. Can you see what information he hid?

GhostTown Thread



Solution:

Reviewing the GhostTown thread that was provided in the challenge description tells us that bumpyhassan used a very basic Steganography technique:

With "simple" in mind,s we started off by running the strings utility on the image, which produced a password in the output:

$ strings doggo.jpg
/f}F
FoOb
ltV?x
password:borkbork

One of the most common stego tools is steghide, so we leveraged the password from the previous step to extract a PDF that was embedded in the image:

$ steghide extract -sf doggo.jpg -p borkbork
wrote extracted data to "itsasecret.pdf".

Viewing the PDF revealed the flag:

The accepted flag was: flag{whos_A_g00d_boi_bork_bork}

Published:

Updated:

Leave a comment