Discuss Scratch

-Io-
Scratcher
1000+ posts

[ATC#9] Harold's secrets

Harold, the FBI has opened your emails. The FBI has found your fl4g.

However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to
Saiid
Scratcher
1000+ posts

[ATC#9] Harold's secrets

-Io- wrote:

Harold, the FBI has opened your emails. The FBI has found your fl4g.

However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to
I want to do it

Saiid
-Io-
Scratcher
1000+ posts

[ATC#9] Harold's secrets

Saiid wrote:

-Io- wrote:

Harold, the FBI has opened your emails. The FBI has found your fl4g.

However, the FBI is not going to disclose how they got to the flag ‘cuz I don’t wanna make the next ATC and I don't know who to select, unless someone wants me to
I want to do it

Saiid
Okay, sure, I guess

  1. As most people probably did, I continued from the pin onto the attachments.
  2. Tried simple image steganography, changing extensions from zip to jpg and jpg to zip, all of which failed
  3. Turns out it was really easy, the key for emails.7z were the chars after the ending bytes of jpgs (ÿÙ) in emails.jpg: 0gzSo8IRjumUbAk1
  4. Opened every email for some info. Nothing
  5. Opened them again with a text editor. Check out this video!.eml had the flag:
    <html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><a href="https://www.youtube.com/watch?v=K7Hn1rPQouU" class="">https/www.youtube.com/watch?v=K7Hn1rPQouU</a><!--flag{uPh0uNDm3!}--></body></html>
    
    ->
    <!--flag{uPh0uNDm3!}-->
    
    -> ufoundme!

And now, if this is legal (due to the first step), I select Saiid for ATC#10!

EDIT: typo

Also I think we should we 'till comp09 officially declares a winner

Last edited by -Io- (Nov. 17, 2016 20:30:16)

comp09
Scratcher
1000+ posts

[ATC#9] Harold's secrets

-Io- wrote:

<!--flag{uPh0uNDm3!}-->
-> ufoundme!

Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.

-Io-, you can add the trophy to your signature, and Saiid can create ATC#10.

Last edited by comp09 (Nov. 17, 2016 20:59:28)

Saiid
Scratcher
1000+ posts

[ATC#9] Harold's secrets

ATC #10 will be (if all goes well) within the week(or sooner), I had what I thought was a good idea, but then watching you guys solve this one, decided to scrap it. I have, however, got another one that I just need to finalize some stuff for. I hope that the challenge I'm making will stimulate a greater involvement in the community, considering our backgrounds

Saiid
-Io-
Scratcher
1000+ posts

[ATC#9] Harold's secrets

comp09 wrote:

-Io- wrote:

<!--flag{uPh0uNDm3!}-->
-> ufoundme!
http://i.cubeupload.com/jytMty.jpg
Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.
Yeah, you can see I was expecting some more tricks other than appending a few bytes
MegaApuTurkUltra
Scratcher
1000+ posts

[ATC#9] Harold's secrets

comp09 wrote:

-Io- wrote:

<!--flag{uPh0uNDm3!}-->
-> ufoundme!

Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.
Which is why I didn't and quickly left
-Io-
Scratcher
1000+ posts

[ATC#9] Harold's secrets

-Io- wrote:

comp09 wrote:

-Io- wrote:

<!--flag{uPh0uNDm3!}-->
-> ufoundme!
http://i.cubeupload.com/jytMty.jpg
Congratulations, you have found Harold's big secret! I should have made this much harder, although it was entertaining to see you guys try too hard.
Yeah, you can see I was expecting some more tricks other than appending a few bytes
btw, was the weird sequence in meow.jpg intentional?
comp09
Scratcher
1000+ posts

[ATC#9] Harold's secrets

-Io- wrote:

btw, was the weird sequence in meow.jpg intentional?
No, probably just a weird coincidence.
-Io-
Scratcher
1000+ posts

[ATC#9] Harold's secrets

comp09 wrote:

-Io- wrote:

btw, was the weird sequence in meow.jpg intentional?
No, probably just a weird coincidence.
Awww man
Saiid
Scratcher
1000+ posts

[ATC#9] Harold's secrets

Is anyone willing to make the medal for ATC X?

Saiid
novice27b
Scratcher
1000+ posts

[ATC#9] Harold's secrets

Can we have some kind of “ATC announcement thread”, so that I get a notification when a new challenge is out?

I missed this one
Saiid
Scratcher
1000+ posts

[ATC#9] Harold's secrets

novice27b wrote:

Can we have some kind of “ATC announcement thread”, so that I get a notification when a new challenge is out?

I missed this one
This?

Saiid
scratchisthebest
Scratcher
1000+ posts

[ATC#9] Harold's secrets

I don't think we ever reversed the JS blob all the way.

It's not important anymore, but… tying up loose ends and all that, right?
CodeLegend
Scratcher
500+ posts

[ATC#9] Harold's secrets

scratchisthebest wrote:

I don't think we ever reversed the JS blob all the way.

It's not important anymore, but… tying up loose ends and all that, right?
I attempted it, but my browser was unhappy.
mattsmithdw2
Scratcher
1000+ posts

[ATC#9] Harold's secrets

Should I even try to solve this?
A-E-
Scratcher
100+ posts

[ATC#9] Harold's secrets

scratchisthebest wrote:

I don't think we ever reversed the JS blob all the way.

It's not important anymore, but… tying up loose ends and all that, right?
Sorry for the necropost, but I decoded the JS. https://atc-9-decoded.glitch.me/

Powered by DjangoBB