NCS Competition 2021 Writeup
  • HHousen National Cyber Scholarship Competition 2021 Writeup
  • Forensics
    • FE02 - 100pts
    • FE03 - 100pts
    • FH01 - 500pts
    • FE04 - 100pts
    • FM01 - 250pts
    • FM02 - 250pts
    • FM03 - 250pts
    • FE01 - 100pts
  • Crypto
    • CM01 - 250pts
    • CM02 - 250pts
    • CX01 - 1000pts
    • CH01 - 500pts
    • CH02 - 500pts
  • Binary
    • BM01 - 250pts
    • BM02 - 250pts
    • BM03 - 250pts
    • BX01 - 1000pts
    • BX02 - 100pts
    • BE01 - 100pts
    • BE02 - 100pts
    • BH01 - 500pts
  • Networking
    • NM01 - 250pts
    • NE01 - 100pts
  • Web
    • WX01 - 1000pts
    • WE01 - 100pts
    • WE02 - 100pts
    • WH01 - 500pts
    • WH02 - 500pts
    • WM01 - 250pts
    • WM02 - 250pts
    • WM03 - 250pts
    • WM04 - 250pts
    • WM05 - 250pts
  • Challenge Name
Powered by GitBook
On this page
  • Briefing
  • Solution
  • Flag

Was this helpful?

Edit on Git
  1. Forensics

FM01 - 250pts

PreviousFE04 - 100ptsNextFM02 - 250pts

Last updated 4 years ago

Was this helpful?

Briefing

Download the file and find a way to get the flag. Contents: fm01.jpg

Challenge Files:

Solution

  1. The flag is embedded in the metadata of the image. This can be easily solved by finding strings in fm01.jpg and searching for flag: strings fm01.jpg | grep Flag to find flag: tr4il3r_p4rk in the metadata for a Photoshop layer name.

  2. Alternatively, simply use exiftool to see the flag in a nice layout of the metadata by running exiftool fm01.jpg:

     ...
 History Software Agent          : Adobe Photoshop 22.2 (Windows), Adobe Photoshop 22.2 (Windows)
 History Changed                 : /, /
 Text Layer Name                 : flag: tr4il3r_p4rk
 Text Layer Text                 : flag: tr4il3r_p4rk
 Document Ancestors              : E25BCF5D355B2F2CE5EB55EC6B67C7AF
 Image Width                     : 1920
 ...

Flag

tr4il3r_p4rk

fm01.zip