Discuss Scratch
- -Io-
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Harold, the FBI has opened your emails. The FBI has found your fl4g.
However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to
However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to

- Saiid
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Harold, the FBI has opened your emails. The FBI has found your fl4g.I want to do it
However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to

Saiid
- -Io-
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Okay, sure, I guessHarold, the FBI has opened your emails. The FBI has found your fl4g.I want to do it
However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to
Saiid

- As most people probably did, I continued from the pin onto the attachments.
- Tried simple image steganography, changing extensions from zip to jpg and jpg to zip, all of which failed
- Turns out it was really easy, the key for emails.7z were the chars after the ending bytes of jpgs (ÿÙ) in emails.jpg: 0gzSo8IRjumUbAk1
- Opened every email for some info. Nothing
- Opened them again with a text editor. Check out this video!.eml had the flag:->
<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><a href="https://www.youtube.com/watch?v=K7Hn1rPQouU" class="">https
/www.youtube.com/watch?v=K7Hn1rPQouU</a><!--flag{uPh0uNDm3!}--></body></html>
-> ufoundme!<!--flag{uPh0uNDm3!}-->
And now, if this is legal (due to the first step), I select Saiid for ATC#10!

EDIT: typo
Also I think we should we 'till comp09 officially declares a winner
Last edited by -Io- (Nov. 17, 2016 20:30:16)
- comp09
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
-> ufoundme!<!--flag{uPh0uNDm3!}-->

Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.

-Io-, you can add the trophy to your signature, and Saiid can create ATC#10.
Last edited by comp09 (Nov. 17, 2016 20:59:28)
- Saiid
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
ATC #10 will be (if all goes well) within the week(or sooner), I had what I thought was a good idea, but then watching you guys solve this one, decided to scrap it. I have, however, got another one that I just need to finalize some stuff for. I hope that the challenge I'm making will stimulate a greater involvement in the community, considering our backgrounds 
Saiid

Saiid
- -Io-
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Yeah, you can see I was expecting some more tricks other than appending a few byteshttp://i.cubeupload.com/jytMty.jpg-> ufoundme!<!--flag{uPh0uNDm3!}-->
Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.

- MegaApuTurkUltra
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Which is why I didn't and quickly left-> ufoundme!<!--flag{uPh0uNDm3!}-->
Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.

- -Io-
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
btw, was the weird sequence in meow.jpg intentional?Yeah, you can see I was expecting some more tricks other than appending a few byteshttp://i.cubeupload.com/jytMty.jpg-> ufoundme!<!--flag{uPh0uNDm3!}-->
Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.
- comp09
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
btw, was the weird sequence in meow.jpg intentional?No, probably just a weird coincidence.

- -Io-
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Awww manbtw, was the weird sequence in meow.jpg intentional?No, probably just a weird coincidence.

- Saiid
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Is anyone willing to make the medal for ATC X?
Saiid
Saiid
- novice27b
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
Can we have some kind of “ATC announcement thread”, so that I get a notification when a new challenge is out?
I missed this one
I missed this one

- scratchisthebest
-
Scratcher
1000+ posts
[ATC#9] Harold's secrets
I don't think we ever reversed the JS blob all the way.
It's not important anymore, but… tying up loose ends and all that, right?
It's not important anymore, but… tying up loose ends and all that, right?

- CodeLegend
-
Scratcher
500+ posts
[ATC#9] Harold's secrets
I don't think we ever reversed the JS blob all the way.I attempted it, but my browser was unhappy.
It's not important anymore, but… tying up loose ends and all that, right?
- A-E-
-
Scratcher
100+ posts
[ATC#9] Harold's secrets
I don't think we ever reversed the JS blob all the way.Sorry for the necropost, but I decoded the JS. https://atc-9-decoded.glitch.me/
It's not important anymore, but… tying up loose ends and all that, right?


/www.youtube.com/watch?v=K7Hn1rPQouU






