Back to Forensics Challenges

Problem

description

Provided Files:

  • Art.txt

Looking at the file initially it looks weird

weird

Scrolling down a little we can see something which looks like it could be part of a QR Code

lookslikeqr

So I decided to Zoom out the file and see if we could get a QR Code. Which sure enough panned out

qrcode

Which after being scanned led me to the below string

HMUlOqE2RpHGPtEbP3jKUEesRNHwF2P5jTsPPNEXwREP4FWiPcnkRBHQGlEXxDUPqU4aEBl4EAMtaG+FD===

It looks like a base64 string, so I tried to base64 decode it but it didn’t give me anything legible.

Looking back at the zoomed out file, there were two places that were darkened compared to the rest of the file at the top and the near bottom. So I tried zooming onto those location to see what it was, and I found these two things. A morse code text and a key Deep.

morse

key

I decoded the morse code to see what it said, which gave me this

LOOKDEEPER,YOUWILLFINDTHEKEY.

I assumed it was referring to the key Deep that we found.

After this I tried a bunch of things I tried using Vigenere on the string and then base64 decoding to no luck. So I left this.

Then after a while since no one was able to solve and many people were asking if there was something wrong with the challenge, the organizers gave a hint.

hint

So it seems that we have most of it solved, but it says that the data has been compressed using a popular JavaScript library. I searched on Google what the popular JavaScript libraries were for compressing and tried a few until I found one that worked which was LzString. I had to Vigenere Decode the string and then apply LzString decompress. I used CyberChef for this.

Which finally gave us the flag

BattleCTF{Looking_00DeepInsid3_Fragment&Fr4m3}