Follow me on Instagram
Never got bored of this Never got bored of this

Never got bored of this ...

18 2
Now that we can't go into Malaysia, I'm really cra Now that we can't go into Malaysia, I'm really craving this...

Now that we can't go into Malaysia, I'm really craving this... ...

9 9
Someone reminded me that I don't need many friends Someone reminded me that I don't need many friends. I just need a few good brothers that'll go out of their comfort zone just for you.

Someone reminded me that I don't need many friends. I just need a few good brothers that'll go out of their comfort zone just for you. ...

13 11
Rediscovering my music with the Creative Outlier G Rediscovering my music with the Creative Outlier Gold w/ software Super X-FI #maya329

Rediscovering my music with the Creative Outlier Gold w/ software Super X-FI #maya329 ...

6 0
Did anyone say pins? #maya329 Did anyone say pins? #maya329

Did anyone say pins? #maya329 ...

11 4
New team? New team?

New team? ...

6 0
When you're out of games to play, you break out th When you're out of games to play, you break out the Jenga and up the stakes.

When you're out of games to play, you break out the Jenga and up the stakes. ...

15 4
We gon be back real soon. Heads up! Search for us We gon be back real soon. Heads up! Search for us on Spotify! #theprinsepcrew

We gon be back real soon. Heads up! Search for us on Spotify! #theprinsepcrew ...

18 2
There's still empty spaces... There's still empty spaces...

There's still empty spaces... ...

13 5
... ...

... ...

38 4
Reality is but illusion. Stickers now available! L Reality is but illusion. Stickers now available! Link in bio! #maya329

Reality is but illusion. Stickers now available! Link in bio! #maya329 ...

13 2
It's been awhile but I felt like I should be honin It's been awhile but I felt like I should be honing my writing skills once more. I'm starting to do writeups on CTF events. You can find them under blog > GCTF 2019 Writeups. Link in bio.

It's been awhile but I felt like I should be honing my writing skills once more. I'm starting to do writeups on CTF events. You can find them under blog > GCTF 2019 Writeups. Link in bio. ...

8 1
It's finally ready. Link in bio. It's finally ready. Link in bio.

It's finally ready. Link in bio. ...

5 0
Together, let me hear you say "Throat Fk'd"! Together, let me hear you say "Throat Fk'd"!

Together, let me hear you say "Throat Fk'd"! ...

13 1
什麼情況,現在? 什麼情況,現在?

什麼情況,現在? ...

13 2
Usually people sick receive fruit basket, suppleme Usually people sick receive fruit basket, supplements, etc. I sick, I get Sake. #我不会

Usually people sick receive fruit basket, supplements, etc. I sick, I get Sake. #我不会 ...

30 1
She had a cocktail in her hand and ribbon in her h She had a cocktail in her hand and ribbon in her hair 🍸🎉

She had a cocktail in her hand and ribbon in her hair 🍸🎉 ...

15 1
Natural habitat. I forgot how fun this was. Natural habitat. I forgot how fun this was.

Natural habitat. I forgot how fun this was. ...

18 1
Happiness is not having to set the alarm for the n Happiness is not having to set the alarm for the next morning. Happy Saturday!😄

Happiness is not having to set the alarm for the next morning. Happy Saturday!😄 ...

16 2
I finally made it all the way to Friday to find ou I finally made it all the way to Friday to find out that I have to work on Saturday!🙍

I finally made it all the way to Friday to find out that I have to work on Saturday!🙍 ...

14 3
Back to Top
Image Alt

Google CTF 2019 // #03-2 Home Computer

Writeup Series

Google CTF 2019 // #03-2 Home Computer

Blunderbussing your way through the decision making process, you figure that one is as good as the other and that further research into the importance of Work Life balance is of little interest to you. You’re the decider after all. You confidently use the credentials to access the “Home Computer.”

 

Something called “desktop” presents itself, displaying a fascinating round and bumpy creature (much like yourself) labeled “cauliflower 4 work – GAN post.” Your 40 hearts skip a beat. It looks somewhat like your neighbors on XiXaX3. ..Ah XiXaX3… You’d spend summers there at the beach, an awkward kid from ObarPool on a family vacation, yearning, but without nerve, to talk to those cool sophisticated locals.

 

So are these “Cauliflowers” earthlings? Not at all the unrelatable bipeds you imagined them to be. Will they be at the party? Hopefully SarahH has left some other work data on her home computer for you to learn more.

Downloading the attachment yields 2 files again.

  • -rw-r–r–@ 1 maya staff 25M Nov 30 1979 family.ntfs
  • -rw-r–r–@ 1 maya staff 49B Nov 30 1979 note.txt

note.txt tells me that I can rename family.ntfs to family.dmg to open it up on MacOS. Useful information.

I mounted family.dmg to find a full windows installation on there. While combing through the user directories, I chanced upon the a credentials.txt within the /Users/Family/Document folder.

The file contained the following text.

I keep pictures of my credentials in extended attributes.

Running xattr -l /Volumes/Family/Users/Family/Documents/credentials.txt on credentials.txt resulted in a a chunk of hexdecimal text encoded under FILE0. This prompted me to run xattr -p FILE0 credentials.txt > cred. in order to output the hex contents into a separate file. Observing the first line of the hex as the following tells me that the file is PNG file:

89 50 4E 47 0D 0A 1A 0A 00 00 00 0D 49 48 44 52

Since we cannot open the hex file as a PNG, I used xxd to convert the hex back into binary with the command xxd -r -p cred cred.png which resulted in the below image.

And with this, we found our forth CTF flag.

Post a Comment