forensics

Sdctf 2022

Susan album party

Solved by: Starry-lord

We get the file stub and notice its a jpeg image. Since it was pretty heavy, and this image looks like its very low res, it was almost sure there were stuff hidden inside. When opened into a image editor such as gimp, we see the first part of the flag:

This hinted at magic bytes for jpg files FFD8. At this point I turned the file to hex and looked for ffd8:

and found three files like that:

sdctf{FFD8_th3n_SOME_s7uff_FFD9} 'some' with a zero
Published on : 10 May 2022