Bone to Pick

Challenge:

We intercepted network traffic between two suspected DEADFACE actors. The problem is, we have no idea what we’re looking at. We think it might have critical information. See if you can find the critical information from the link below and submit the flag.

Link to String

Solution:

The provided PasteBin link was a blob of text which I recognized as a Base64 encoded JPG based on the beginning string, /9j/4AAQSk. I downloaded the Paste and Base64-decoded the data to produce a JPEG file.

$ curl -s https://pastebin.com/raw/xL04idu2 | base64 -d > Bone_to_Pick.jpg

Viewing the image reveals the flag, flag{angrybones}.

Published:

Updated:

Leave a comment