warmup

Quartet Writeup

Nahamcon 2025

Solve by thewhiteh4t

Four files are given with .z01 extension, running file command on them shows the following output :

quartet.z01:  Zip multi-volume archive data, at least PKZIP v2.50 to extract
quartet.z02:  data
quartet.z03:  data
quartet.z04:  Zip archive data, made by v3.0 UNIX, extract using at least v2.0, last modified, last modified Sun, May 10 2025 04:28:04, uncompressed size 2035495, method=deflate

Unzipping them leads to another file named quartet.jpeg. By running strings command on the image and grepping for flag string we can get the flag :

strings quartet.jpeg | grep flag
flag{8f667b09d0e821f4e14d59a8037eb376}

Key Learning & Takeaways

  • Run strings : You’d be surprised how often a flag or a crucial hint is just sitting there in plain text.
  • Check the file type with file : A simple file command can tell you a lot about what you’re dealing with. Knowing this helps you pick the right tools for the job.
  • Keep an eye out for flag formats : Most CTFs use a consistent flag format (like flag{...}).
Published on : 31 May 2025