Took the byte

I analyzed the file, and it doesn't seem to match any known format for a password. Is cryptoanalysis required? This would be weird, since it's a forensics challenge.

Comments

  • edited July 6

    It's a forensics challenge alright. Literally takes a byte.

    limbernie
    Write-ups of retired machines

  • Honestly, this was more of a crypto/forensics hybrid to me in my opinion. For those stuck on this, think of the operation that could make the most common byte be that byte in the file rather than the regular most common byte in many files.

    will135

  • I tried any signature here:
    https://en.wikipedia.org/wiki/List_of_file_signatures
    The file doesn't even match closely any of these (even with one byte missing).
    I'm puzzled...

  • Ah, so there's some crypto in there!

  • Well, deobufscation more than crypto...

  • Solved, thanks!

  • Hello, I've tried to solve that few ways but I still don't get it, could you give me any hints where should I start searching?

  • @davidlightman said:

    Well, deobufscation more than crypto...

    I think it is more about crypto. But very simple.

    YanTayga

  • Right, I spent way too long on this challenge. Ignore the fact it is in forensics. Should 100% be in crypto.

    OSCP | TMHC CTF

  • @chivato
    please, can you tell us all, did you spent lot of time with roc....ou ?

  • Rockyou? I have no idea where rockyou would come into this challenge... it is certainly not needed. If you need a password, try looking for patterns somewhere (keep the challenge title in mind).

    OSCP | TMHC CTF

  • I decoded a couple of strings which seem like a bash script, obfuscated. Can someone share some links?

  • @chivato said:
    Right, I spent way too long on this challenge. Ignore the fact it is in forensics. Should 100% be in crypto.

    I solved it for a minute using classic forensics tool. So for me it is 100% forensics))

    tabacci

  • What is a tool (in PM)? I solved it by writing python script to apply one byte w w all variants and saving result + using file & grep to analyse results

    YanTayga

  • It was more like misc - crypto challenge imo.

    morph3

  • Type your comment> @tabacci said:

    @chivato said:
    Right, I spent way too long on this challenge. Ignore the fact it is in forensics. Should 100% be in crypto.

    I solved it for a minute using classic forensics tool. So for me it is 100% forensics))

    Can confirm, classic forensic tool handled it within seconds.

  • edited July 10

    Very cool challenge.

    Indeed a very versatile and classic tool helped.

  • edited July 10

    @mm0086444 said:
    @chivato said:

    classic forensic tool

    Men, what are you talking about? Please PM me the name of that magic tool :)

    YanTayga

  • edited July 10

    @YanTayga said:

    @mm0086444 said:
    @chivato said:

    classic forensic tool

    Men, what are you talking about? Please PM me the name of that magic tool :)

    You mean you don't know what tool that is :open_mouth:

  • @Wolfstorm, to be honest - no :)

    YanTayga

  • edited July 15
    Type your comment> @YanTayga said:
    > @mm0086444 said:
    > @chivato said:
    >
    > classic forensic tool
    >
    >
    >
    >
    >
    > Men, what are you talking about? Please PM me the name of that magic tool :)

    If spoiler, please let me know and I'll scrub this:

    I suggest using a feature-packed hex editor for Windows that's popular in forensics. At least, it's popular in my eyes
  • Type your comment> @mm0086444 said:

    Type your comment> @YanTayga said:
    > @mm0086444 said:
    > @chivato said:
    >
    > classic forensic tool
    >
    >
    >
    >
    >
    > Men, what are you talking about? Please PM me the name of that magic tool :)

    If spoiler, please let me know and I'll scrum this:

    I suggest using a feature-packed hex editor for Windows that's popular in forensics. At least, it's popular in my eyes

    I think it's very clear :)

    I solved it using the program.

    My advice is: Think as if the bytes were a coin

  • I didn't get it first. Then I did it in 1-2 minutes without using any program.

    Spiderixius

  • I have no idea how you would solve this with a forensics tool, I did it all manually and as far as I can tell it was all identical to a certain cipher that is crypto 101... I guess I took the hard route, although once I realized the initial "cipher" it took me about 3 minutes max.

    OSCP | TMHC CTF

  • I used perl to flip it

  • Hint: He took a single byte.

  • I don't get it. Can someone give me a nudge ? I have no clue how to solve this.

  • Could someone please PM the tool mentioned in the thread? :smile: very curious

    If someone was helpful, don't forget to give +1 Respect.
    Arrexel

Sign In to comment.