I believe you can't fly

Flag: HACKDAY{aM_@_fR3E-@LbaRT0s5}

Challenge

1MB

i-believe-you-can-t-fly.zip

archive

Description

---

In the world of Featherstone Airways, where airships dominate the skies and steam-powered engines hum in harmony with the winds, disaster strikes aboard Flight 404. A cacophony of alarms blares through the cabin, and an automated voice pierces the tension: "Alert: Navigation systems compromised. Manual override unavailable."

The captain, drenched in sweat, confesses that the ship’s intricate steam-core systems have been infiltrated by rogue machinists. The autopilot is spewing erratic commands, and the controls have been rendered useless. Amid the chaos, your gaze falls upon a forgotten device—a mechanical tablet left behind by the ship’s chief engineer. Its dimly glowing screen is your only hope to uncover the secrets of this sabotage and reclaim control of the vessel.

The tablet appears to hold critical files containing traces of the hackers’ interference. To restore the autopilot and prevent the airship from plunging into the abyss, you must uncover the password hidden within these files. As the last passenger with a keen mind for cyber-steam security, it falls to you to analyze these files, piece together the password, and save the airship before it’s too late. Time is of the essence, and the lives of everyone aboard rest in your hands. Will you rise to the challenge and prove yourself the hero of the skies?

---

sha256: b0fcb186475c7548adb7be66c2519bb11f0d6e1ebed997281fde8c0c923434d2

Ce challenge tourne sur un docker et n'est pas disponible

Solution

Etape 1

On s'occupe du fichier plane_logs.txt, il faut voir dans les log la ligne :

[2025-01-22 14:01:18] DEBUG: Encoded word detected: KDFNGD\~dPbCbiU6H

Il s'agit de ROT sur de l'ASCII, il faut faire -3 sur tous les caractères :

Ou en Python :

print(''.join([chr(n-3) for n in b"KDFNGD\~dPbCbiU6H"]))
# HACKDAY{aM_@_fR3E

Etape 2

Il faut utiliser un stegseek sur l'image say_hi.jpg :

┌──(thaysan)-[~]
└─$ stegseek say_hi.jpg rockyou.txt
StegSeek 0.6 - https://github.com/RickdeJager/StegSeek

[i] Found passphrase: "securepassword"
[i] Original filename: "shh.txt".
[i] Extracting to "say_hi.jpg.out".

┌──(thaysan)-[~]
└─$ cat say_hi.jpg.out
-@LbaRT0s5}