Skip to content

Commit f7fb767

Browse files
feat: added writeup for challenge Mike
1 parent 469f94d commit f7fb767

File tree

5 files changed

+39
-0
lines changed

5 files changed

+39
-0
lines changed
File renamed without changes.
+39
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
# Mike - Forensics
2+
3+
Author - [Sanjay Baskaran](http://github.com/sanjaybaskaran01)
4+
5+
Tag : Forensics, OSINT
6+
7+
---
8+
## Source
9+
10+
```
11+
Julia has come to you to ask for help. After spending too much time on his computer, Mike has gone insane, but no one knows why. Can you figure it out? Julia would really appreciate it. Here's how his desktop looked like. Weird how his system time doesn't change..
12+
13+
Wrap the flag that you find with dsc{<flag>}!
14+
```
15+
<p align="center">
16+
<img src="./desktop_wallpaper.png" width=500 alt="desktop_wallpaper.png"/>
17+
</p>
18+
19+
## Exploit
20+
21+
In the challenge they have mentioned how `his system time doesn't change` keeping this in mind for the later stage of the exploit, we have no luck with the usual exploits `strings desktop_wallpaper.png` or the `meta data` of the file. We could see that the image quality or the pixels of the image seem disturbed, using `stegsolve` on the image leads to..
22+
23+
<p align="center">
24+
<img src="./stegsolve.png" width=500 alt="stegsolve"/>
25+
</p>
26+
27+
The barcode seems to be a `spotify barcode` and when we scan them they lead to `Level of Concern by Twenty One Pilots`
28+
29+
Now keeping in mind about how the system time does not change for Mike's computer, we fast forward to the exact timestamp of `1:16` in the song which did not help much. Looking back at the image given, everyone who has seen the Matrix knows that Neo picks the red pill when given a choice. So we go through the `youtube` video of `Level of Concern by Twenty One Pilots` and at the exact timestamp of `1:16` in the captions we find..
30+
31+
<p align="center">
32+
<img src="./flag.png" width=500 alt="flag"/>
33+
</p>
34+
35+
The flag is
36+
37+
```
38+
dsc{LOC-888-481-90TO}
39+
```
Loading

Deconstruct.f/Forensics/Mike/flag.png

506 KB
Loading
468 KB
Loading

0 commit comments

Comments
 (0)