Minions (CTF Learn)

Forensics

Challenge — Minions — CTFlearn — CTF Practice — CTF Problems — CTF Challenges

Hey! Minions have stolen my flag, encoded it few times in one cipher, and then hidden it somewhere there: https://mega.nz/file/1UBViYgD#kjKISs9pUB4E-1d79166FeX3TiY5VQcHJ_GrcMbaLhg Can you help me? TIP: Decode the flag until you got a sentence.

Don’t forget we always work inside VMs .

So we’ll upload the file there and then :

Here we define the file type , There are a lot of interesting things :

I decided to use exif and exiftool, but no positive result :

Then we used binwalk :

We accessed the extracted file, and then determined the type of this compressed file:

It seems that the file (..txt) is related to something :

We read the file :

There appears to be a file , I downloaded the file :

Here we define the file type , There are a lot of interesting things :

I decided to use exif and exiftool, but no positive result :

Then we used binwalk :

It seems I reached the goal :

I decided to use file and exiftool, but nothing seemed to really matter :

I used strings :

I used my friend https://cyberchef.org/ :

And also do not forget that note (TIP: Decode the flag until you got a sentence.)

And Base64 :

CTF{VmtaU1IxUXhUbFZSYXpsV1RWUnNRMVpYZEZkYWJFWTJVVmhrVlZGVU1Eaz0=)

VmtaU1IxUXhUbFZSYXpsV1RWUnNRMVpYZEZkYWJFWTJVVmhrVlZGVU1Eaz0

VkZSR1QxTlVRazlWTVRsQ1ZXdFdabEY2UVhkVVFUMDk=

VFRGT1NUQk9VMTlCVWtWZlF6QXdUQT09

TTFOSTBOU19BUkVfQzAwTA==

M1NI0NS_ARE_C00L

CTF{VmtaU1IxUXhUbFZSYXpsV1RWUnNRMVpYZEZkYWJFWTJVVmhrVlZGVU1Eaz0=)

CTF{M1NI0NS_ARE_C00L)

See you soon in other reports….!!

Abdelwahab_Shandy

AS_Cyber