Bitmaps are cool

March 24 2017

# # #

Here is a tiny file that you might find fun to do while cramming other forms of knowledge in your head. :D

All the best for your exams.

  • Flag Format: /flag{.+}/

Provided text.bmp

Solution

This is a simple question meant to be a refresher while the examinations are going on.

text.bmp

This does not show anything other than the fact that most of the file is empty. Which actually makes the job easier. On opening the file in binary mode, we confirm this.

00000000: 424d 6675 0000 0000 0000 3600 0000 2800  BMfu......6...(.
00000010: 0000 6400 0000 6400 0000 0100 1800 0000  ..d...d.........
00000020: 0000 3075 0000 c30e 0000 c30e 0000 0000  ..0u............
00000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b50: 0000 0000 0000 0000 7d50 3a00 0000 0000  ........}P:.....
00000b60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
...
00000e70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
...
000074b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000074c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000074d0: 616c 6600 0000 0000 0000 0000 0000 0000  alf.............
000074e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000074f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
...

However we also see some text scattered in the middle. Which seems interesting.

We try to read the data in the files.

$ cat text.bmp
BMfu6(dd0u}P:smroFynaMnIsemoCongetS{galf

That seems interesting enough. It simply the reversed string of our flag.

}P:smroFynaMnIsemoCongetS{galf

Flag

flag{StegnoComesInManyForms:P}

Recommended Reading

Timing Attack

# # # #

Once upon a time, there was a programmer. His name was Anshul. He did not know how to work with passwords. His friend Animesh took this opportunity to do jugaad and guess the passwords so that he is able to order a lot of free shirts from MustCapture...

...

Recommended Reading

Large e and Small d (Weiner)

# # # #

c = 49938873005546615435687311504872509785022284769848698526216639826561007249140360312632267256915204926681345807364733487154803200306964789424438457669341375204871001335059277860364152540205309441986059468568646721718475252818788849738581432943901958543446753508706429359356503196241596325655490713282416769960

...