Snowboard
1 minute to read
We are told to find the flag in this image:
However, the flag is not visible inside the image and it is not hidden in its content. However, we can find the flag in the file raw content.
In order to extract printable characters from the image we can use strings
and take the first values with head
:
$ strings snowboard.jpg | head
JFIF
CTFlearn{CTFIsEasy!!!}
Q1RGbGVhcm57U2tpQmFuZmZ9Cg==
Exif
Canon
Canon EOS 6D Mark II
GIMP 2.10.6
2019:05:07 14:37:21
0230
2018:08:23 12:52:08
We see a flag: CTFlearn{CTFIsEasy!!!}
, but it is not correct.
Below that, there is a string encoded in Base64, which decodes to another flag:
$ echo Q1RGbGVhcm57U2tpQmFuZmZ9Cg== | base64 -d
CTFlearn{SkiBanff}
And this one is correct.