🔍Forensics

What is Forensics?

• Analyzing digital artifacts, logs and incidents

• Steganography - finding hidden information in different types of files

Ultimate weapon for this challenge is Aperi Solve.

Alien

This question one of my favourite questions. Download the wav file and listen to it. 4second for nothing. HAHAHA. But wait, we need to find out since this is forensics type.

For audio, we can analysis the sound using audacity, sonic visualisation, spectral analysis, deep sound and etc.

For this question, I just use dcode for checking spectral. Upload the file and play. Or can use audacity. Check on spectrogram.

We got the flag.

FLAG : FSECSS{4L13N}

Strings It

Given downloaded file in google drive. Download the file and fire up aperi solve.

As the question mention about strings, let check that parts. Or can put commands

strings <filename>

FLAG : FSECSS{4lw4y5_ch3ck_5tr1ng5}

Can you see me?

Given pdf type. For this challenge, I need to open my linux machine since I don’t know how to find the flag without using linux.

Transfer pdf file to my linux machine. Enter pdftotext command then it will output in txt.

pdftotext love_letter.pdf

FLAG : FSECSS{h1dd3n_1n_pl41n_51ght}

Corrupted

Download the file. It appear to be in jpg. Let check image header first.

always check four byte

Hurm,,, the file header are corrupted here. That why it cannot be read by image. Let fix it to correct header and save it.

FF D8 FF E0

FLAG : FSECSS{c0rrupt3d}

Can you fix it?

This challenge come with png file. As usually, check the header file. For png file only, the first line must be correct. For easier way, open two file png, one the corrupted and another not corrupted.

Corrupted file header. It suppose to be like this.

Let fix it to correct one.

Given qrcode . HAHA. Or linux machine. zbarimg <filename>.

It show the flag. :D

FLAG : FSECSS{y0u_d1d_1t}