acgoularthub/ctf-basicsteganography

A write-up for a basic steganography challenge hosted on TryHackMe.com

---

Basic Steganography

Source: Created by SuitGuy on TryHackMe.com

Description:

​ A beginners introduction to image Steganography and file extraction.

Related Hosting Links

• TryHackMe.com
  • Link: https://tryhackme.com/room/basicsteganographyal

Special Notes:

​ The second challenge within this room involves cracking a steganography file. This specific action can take several hours.

Instructions:

• Challenge 1: Basic Extraction
  • Download this image file and discover the hidden flag
    • 
  • Steganography is a game of checking several avenues and practicing consistency in examining files. In this case, let's go ahead do a basic check. Steghide is a simple tool that allows for hiding files inside other files such as images. Here we'll run the basic steghide extraction command just as a base sanity check.
    • 
  • Well, it looks like something was in there! Let's see what it is
    • 
  • Looks good!
• Challenge 2: Cracking
  • Download this image file and discover the hidden flag, this challenge will also require knowledge of password cracking
    • 
  • Seems like this one is going to be focused on cracking the stego file. Let's try stegcracker with rockyou.txt as the wordlist
    • 
    • 
  • Well it seems that all that time was worth it, let's take a look at that output
    • 
  • There we go!
• Challenge 3: A Little Bit of Everything
  • Download this image file and discover the hidden flag, this challenge will also require A basic understanding of password cracking and string encoding/decoding.
    • 
  • Hmm, this one looks too be fairly tricky. Let's go ahead and start by seeing if we can crack the file.
    • 
  • After a little bit that appears to have worked, let's see what we have here
    • 
  • Well now, that's definitely encoded. We'll go ahead and run that through an online decoder
    • In this case, I'll be using this site: https://www.base64decode.org/
    • 
  • Closer, this looks almost like a flag. It seems that the text isn't quite right and it might have been rotated. Let's see what all of the potential rotation encryptions look like for this. I'll be using this site for that part: https://www.rot13.com/
    • 
  • Bingo! There's our flag!

Flags:

​ One within each steganography file provided within this challenge.