My Write-up on Black Valentine CTF: Dominos (Forensic 100)

Problem

Given two files.

clue.zip
wallpaper.jpg

soal

Solution

$ exiftool wallpaper.jpg

metadata_wallpaper

XP comment property contains base64 string. Decode it.

base642string

Use Hashkiller to obtain plaintext. You can obtain ‘j0k3r’, use as password for the clue.zip.

isi_clue.zip

Clues are in history.txt fles. Read a while, you’ll get rarity in history.txt file.

history.txt

Collect all uppercase charachter as string.

uppercase_n_digit

To extract jokerBrangkas.zip, use that string as password.

You will get .txt file that contain flag.

The flag is fL4G0nd0L-j0K3rS

Advertisements