Chimera

Category

Forensics

Description

It’s just one inside another…

Solution

The attached file is just a blank image. Using binwalk reveals that there’s two images in the file.

binwalk -e 87122c397ac8b10d53057a2c9ec1834e.png

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             PNG image, 499 x 389, 8-bit/color RGBA, non-interlaced
41            0x29            Zlib compressed data, compressed
234601        0x39469         PNG image, 499 x 389, 8-bit/color RGBA, non-interlaced
234642        0x39492         Zlib compressed data, compressed

But extracting data with binwalk doesn’t work, so let’s try foremost instead.

foremost 87122c397ac8b10d53057a2c9ec1834e.png
Processing: 87122c397ac8b10d53057a2c9ec1834e.png
|*|

Now we got a new image in the output directory. Opening the image we get the flag.

Image

flag{4bs0rb3d}

n00bz

Home of the n00bz CTF team.


By n00bz, 2022-02-20