Cyber Info•3y ago•

43 replies

ctf challenge , category pentest

Cybersecurity student, need help with ctf challenge , category : pentest

clean-aquamarineOP•1/2/23, 10:09 PM

w33t•1/2/23, 10:17 PM

Have you pulled down the image and checked it for steganography?

clean-aquamarineOP•1/2/23, 10:17 PM

how

clean-aquamarineOP•1/2/23, 10:17 PM

i checked with notepad

clean-aquamarineOP•1/2/23, 10:17 PM

there is nothing

w33t•1/2/23, 10:18 PM

That's not going to inherently yield anything lol. Try stegdetect.

w33t•1/2/23, 10:19 PM

If anything, upload the picture here and I'll take a look at it. Also, did you scan it down with nmap?

clean-aquamarineOP•1/2/23, 10:19 PM

yes

clean-aquamarineOP•1/2/23, 10:19 PM

there is only one port

clean-aquamarineOP•1/2/23, 10:19 PM

80 http

clean-aquamarineOP•1/2/23, 10:19 PM

okay wait

clean-aquamarineOP•1/2/23, 10:19 PM

clean-aquamarineOP•1/2/23, 10:21 PM

when i try with steghide

clean-aquamarineOP•1/2/23, 10:21 PM

it asks password

w33t•1/2/23, 10:21 PM

So you probably need to crack it, then.

clean-aquamarineOP•1/2/23, 10:21 PM

how?

clean-aquamarineOP•1/2/23, 10:21 PM

rockyou.txt

clean-aquamarineOP•1/2/23, 10:21 PM

w33t•1/2/23, 10:22 PM

Stegseek, more than likely. Or try guessing based off the quote on the site

w33t•1/2/23, 10:22 PM

Could do but I personally use Crackstation's 15gb list

clean-aquamarineOP•1/2/23, 10:22 PM

wow

clean-aquamarineOP•1/2/23, 10:22 PM

there is error when i try with stegseek

clean-aquamarineOP•1/2/23, 10:29 PM

i changed picture from png to jpeg

clean-aquamarineOP•1/2/23, 10:30 PM

now im trying to crack it

w33t•1/2/23, 10:42 PM

Is it working for you?

clean-aquamarineOP•1/2/23, 10:42 PM

nah

clean-aquamarineOP•1/2/23, 10:42 PM

i cant do anything

clean-aquamarineOP•1/2/23, 10:42 PM

i surrend

w33t•1/2/23, 10:43 PM

Yeah, it's not working for me either, so it may not be stego

clean-aquamarineOP•1/2/23, 10:43 PM

they said its puzzle

w33t•1/2/23, 10:46 PM

Did you walk the picture with

file

file

w33t•1/2/23, 10:46 PM

You could try

strings

strings

too.

clean-aquamarineOP•1/2/23, 10:49 PM

i tried

clean-aquamarineOP•1/2/23, 10:49 PM

there is nothing

clean-aquamarineOP•1/2/23, 10:49 PM

i even do stegsolve

clean-aquamarineOP•1/2/23, 10:49 PM

there is nothing

w33t•1/2/23, 10:57 PM

Yeah, looks like it.

w33t•1/2/23, 10:58 PM

I'd probably expand your directory search and maybe look for directory clues in the text on that page

clean-aquamarineOP•1/2/23, 10:59 PM

what

clean-aquamarineOP•1/2/23, 10:59 PM

there is nothing only one citate

clean-aquamarineOP•1/2/23, 11:02 PM

anyways

clean-aquamarineOP•1/2/23, 11:02 PM

thank you man

ctf challenge , category pentest

Similar Threads

Similar Threads

Similar Threads