diff --git a/imaginary-ctf/round-38/a-timely-manner/README.md b/imaginary-ctf/round-38/a-timely-manner/README.md index 03dbb9b..2e07ce8 100644 --- a/imaginary-ctf/round-38/a-timely-manner/README.md +++ b/imaginary-ctf/round-38/a-timely-manner/README.md @@ -8,3 +8,185 @@ see [flag.zip](./flag.zip) ## solution +well the title and descriptions are big hints that the flag is in the time, so i tried unzipping the file and looking at the date and time section, but i didn't know what to do from there, but then i realized that it's a zip file and so i was able to view the time bytes from there + +hexdump of flag.zip +``` +00000000: 504b 0304 1400 0000 0800 3372 6e41 e455 PK........3rnA.U +00000010: 066f 3300 0000 3900 0000 0800 1c00 6669 .o3...9.......fi +00000020: 6c65 732f 3131 5554 0900 0382 18a4 5082 les/11UT......P. +00000030: 18a4 5075 780b 0001 04e8 0300 0004 e803 ..Pux........... +00000040: 0000 cb4a 2e49 ab2e 4a4d 894f cb49 4c2f ...J.I..JM.O.IL/ +00000050: 8e4f cc03 b212 b353 a1dc b4fc a25c a058 .O.....S.....\.X +00000060: 7c6a 6169 6659 624e 6a5e 726a 7c72 4e62 |jaifYbNj^rj|rNb +00000070: 7171 2d17 0050 4b03 0414 0000 0008 007b qq-..PK........{ +00000080: 6668 54e4 5506 6f33 0000 0039 0000 0007 fhT.U.o3...9.... +00000090: 001c 0066 696c 6573 2f31 5554 0900 03ea ...files/1UT.... +000000a0: c127 62ea c127 6275 780b 0001 04e8 0300 .'b..'bux....... +000000b0: 0004 e803 0000 cb4a 2e49 ab2e 4a4d 894f .......J.I..JM.O +000000c0: cb49 4c2f 8e4f cc03 b212 b353 a1dc b4fc .IL/.O.....S.... +000000d0: a25c a058 7c6a 6169 6659 624e 6a5e 726a .\.X|jaifYbNj^rj +000000e0: 7c72 4e62 7171 2d17 0050 4b03 0414 0000 |rNbqq-..PK..... +000000f0: 0008 0067 6e2e 7de4 5506 6f33 0000 0039 ...gn.}.U.o3...9 +00000100: 0000 0008 001c 0066 696c 6573 2f31 3355 .......files/13U +00000110: 5409 0003 42dc c088 42dc c088 7578 0b00 T...B...B...ux.. +00000120: 0104 e803 0000 04e8 0300 00cb 4a2e 49ab ............J.I. +00000130: 2e4a 4d89 4fcb 494c 2f8e 4fcc 03b2 12b3 .JM.O.IL/.O..... +00000140: 53a1 dcb4 fca2 5ca0 587c 6a61 6966 5962 S.....\.X|jaifYb +00000150: 4e6a 5e72 6a7c 724e 6271 712d 1700 504b Nj^rj|rNbqq-..PK +00000160: 0304 1400 0000 0800 436c 7340 e455 066f ........Cls@.U.o +00000170: 3300 0000 3900 0000 0700 1c00 6669 6c65 3...9.......file +00000180: 732f 3555 5409 0003 3e98 674f 3e98 674f s/5UT...>.gO>.gO +00000190: 7578 0b00 0104 e803 0000 04e8 0300 00cb ux.............. +000001a0: 4a2e 49ab 2e4a 4d89 4fcb 494c 2f8e 4fcc J.I..JM.O.IL/.O. +000001b0: 03b2 12b3 53a1 dcb4 fca2 5ca0 587c 6a61 ....S.....\.X|ja +000001c0: 6966 5962 4e6a 5e72 6a7c 724e 6271 712d ifYbNj^rj|rNbqq- +000001d0: 1700 504b 0304 1400 0000 0800 6740 3549 ..PK........g@5I +000001e0: e455 066f 3300 0000 3900 0000 0700 1c00 .U.o3...9....... +000001f0: 6669 6c65 732f 3355 5409 0003 32a1 e257 files/3UT...2..W +00000200: 32a1 e257 7578 0b00 0104 e803 0000 04e8 2..Wux.......... +00000210: 0300 00cb 4a2e 49ab 2e4a 4d89 4fcb 494c ....J.I..JM.O.IL +00000220: 2f8e 4fcc 03b2 12b3 53a1 dcb4 fca2 5ca0 /.O.....S.....\. +00000230: 587c 6a61 6966 5962 4e6a 5e72 6a7c 724e X|jaifYbNj^rj|rN +00000240: 6271 712d 1700 504b 0304 1400 0000 0800 bqq-..PK........ +00000250: 6e55 3364 e455 066f 3300 0000 3900 0000 nU3d.U.o3...9... +00000260: 0700 1c00 6669 6c65 732f 3855 5409 0003 ....files/8UT... +00000270: d09a f470 d09a f470 7578 0b00 0104 e803 ...p...pux...... +00000280: 0000 04e8 0300 00cb 4a2e 49ab 2e4a 4d89 ........J.I..JM. +00000290: 4fcb 494c 2f8e 4fcc 03b2 12b3 53a1 dcb4 O.IL/.O.....S... +000002a0: fca2 5ca0 587c 6a61 6966 5962 4e6a 5e72 ..\.X|jaifYbNj^r +000002b0: 6a7c 724e 6271 712d 1700 504b 0304 1400 j|rNbqq-..PK.... +000002c0: 0000 0800 3372 4173 e455 066f 3300 0000 ....3rAs.U.o3... +000002d0: 3900 0000 0800 1c00 6669 6c65 732f 3130 9.......files/10 +000002e0: 5554 0900 03f2 f86f 7ff2 f86f 7f75 780b UT.....o...o.ux. +000002f0: 0001 04e8 0300 0004 e803 0000 cb4a 2e49 .............J.I +00000300: ab2e 4a4d 894f cb49 4c2f 8e4f cc03 b212 ..JM.O.IL/.O.... +00000310: b353 a1dc b4fc a25c a058 7c6a 6169 6659 .S.....\.X|jaifY +00000320: 624e 6a5e 726a 7c72 4e62 7171 2d17 0050 bNj^rj|rNbqq-..P +00000330: 4b03 0414 0000 0008 0075 6165 35e4 5506 K........uae5.U. +00000340: 6f33 0000 0039 0000 0007 001c 0066 696c o3...9.......fil +00000350: 6573 2f37 5554 0900 037e 454e 457e 454e es/7UT...~ENE~EN +00000360: 4575 780b 0001 04e8 0300 0004 e803 0000 Eux............. +00000370: cb4a 2e49 ab2e 4a4d 894f cb49 4c2f 8e4f .J.I..JM.O.IL/.O +00000380: cc03 b212 b353 a1dc b4fc a25c a058 7c6a .....S.....\.X|j +00000390: 6169 6659 624e 6a5e 726a 7c72 4e62 7171 aifYbNj^rj|rNbqq +000003a0: 2d17 0050 4b03 0414 0000 0008 0073 316c -..PK........s1l +000003b0: 46e4 5506 6f33 0000 0039 0000 0007 001c F.U.o3...9...... +000003c0: 0066 696c 6573 2f32 5554 0900 038a 9001 .files/2UT...... +000003d0: 558a 9001 5575 780b 0001 04e8 0300 0004 U...Uux......... +000003e0: e803 0000 cb4a 2e49 ab2e 4a4d 894f cb49 .....J.I..JM.O.I +000003f0: 4c2f 8e4f cc03 b212 b353 a1dc b4fc a25c L/.O.....S.....\ +00000400: a058 7c6a 6169 6659 624e 6a5e 726a 7c72 .X|jaifYbNj^rj|r +00000410: 4e62 7171 2d17 0050 4b03 0414 0000 0008 Nbqq-..PK....... +00000420: 0030 6e21 79e4 5506 6f33 0000 0039 0000 .0n!y.U.o3...9.. +00000430: 0008 001c 0066 696c 6573 2f31 3255 5409 .....files/12UT. +00000440: 0003 5c51 ed84 5c51 ed84 7578 0b00 0104 ..\Q..\Q..ux.... +00000450: e803 0000 04e8 0300 00cb 4a2e 49ab 2e4a ..........J.I..J +00000460: 4d89 4fcb 494c 2f8e 4fcc 03b2 12b3 53a1 M.O.IL/.O.....S. +00000470: dcb4 fca2 5ca0 587c 6a61 6966 5962 4e6a ....\.X|jaifYbNj +00000480: 5e72 6a7c 724e 6271 712d 1700 504b 0304 ^rj|rNbqq-..PK.. +00000490: 1400 0000 0800 4233 6333 e455 066f 3300 ......B3c3.U.o3. +000004a0: 0000 3900 0000 0700 1c00 6669 6c65 732f ..9.......files/ +000004b0: 3655 5409 0003 fc1d 6a43 fc1d 6a43 7578 6UT.....jC..jCux +000004c0: 0b00 0104 e803 0000 04e8 0300 00cb 4a2e ..............J. +000004d0: 49ab 2e4a 4d89 4fcb 494c 2f8e 4fcc 03b2 I..JM.O.IL/.O... +000004e0: 12b3 53a1 dcb4 fca2 5ca0 587c 6a61 6966 ..S.....\.X|jaif +000004f0: 5962 4e6a 5e72 6a7c 724e 6271 712d 1700 YbNj^rj|rNbqq-.. +00000500: 504b 0304 1400 0000 0800 7372 3063 e455 PK........sr0c.U +00000510: 066f 3300 0000 3900 0000 0700 1c00 6669 .o3...9.......fi +00000520: 6c65 732f 3955 5409 0003 eaf3 4f70 eaf3 les/9UT.....Op.. +00000530: 4f70 7578 0b00 0104 e803 0000 04e8 0300 Opux............ +00000540: 00cb 4a2e 49ab 2e4a 4d89 4fcb 494c 2f8e ..J.I..JM.O.IL/. +00000550: 4fcc 03b2 12b3 53a1 dcb4 fca2 5ca0 587c O.....S.....\.X| +00000560: 6a61 6966 5962 4e6a 5e72 6a7c 724e 6271 jaifYbNj^rj|rNbq +00000570: 712d 1700 504b 0304 1400 0000 0800 4043 q-..PK........@C +00000580: 336d e455 066f 3300 0000 3900 0000 0700 3m.U.o3...9..... +00000590: 1c00 6669 6c65 732f 3455 5409 0003 88e8 ..files/4UT..... +000005a0: ba79 88e8 ba79 7578 0b00 0104 e803 0000 .y...yux........ +000005b0: 04e8 0300 00cb 4a2e 49ab 2e4a 4d89 4fcb ......J.I..JM.O. +000005c0: 494c 2f8e 4fcc 03b2 12b3 53a1 dcb4 fca2 IL/.O.....S..... +000005d0: 5ca0 587c 6a61 6966 5962 4e6a 5e72 6a7c \.X|jaifYbNj^rj| +000005e0: 724e 6271 712d 1700 504b 0304 1400 0000 rNbqq-..PK...... +000005f0: 0800 692e 7463 e455 066f 3300 0000 3900 ..i.tc.U.o3...9. +00000600: 0000 0700 1c00 6669 6c65 732f 3055 5409 ......files/0UT. +00000610: 0003 563c a570 563c a570 7578 0b00 0104 ..V<.pV<.pux.... +00000620: e803 0000 04e8 0300 00cb 4a2e 49ab 2e4a ..........J.I..J +00000630: 4d89 4fcb 494c 2f8e 4fcc 03b2 12b3 53a1 M.O.IL/.O.....S. +00000640: dcb4 fca2 5ca0 587c 6a61 6966 5962 4e6a ....\.X|jaifYbNj +00000650: 5e72 6a7c 724e 6271 712d 1700 504b 0102 ^rj|rNbqq-..PK.. +00000660: 1e03 1400 0000 0800 3372 6e41 e455 066f ........3rnA.U.o +00000670: 3300 0000 3900 0000 0800 1800 0000 0000 3...9........... +00000680: 0100 0000 ff81 0000 0000 6669 6c65 732f ..........files/ +00000690: 3131 5554 0500 0382 18a4 5075 780b 0001 11UT......Pux... +000006a0: 04e8 0300 0004 e803 0000 504b 0102 1e03 ..........PK.... +000006b0: 1400 0000 0800 7b66 6854 e455 066f 3300 ......{fhT.U.o3. +000006c0: 0000 3900 0000 0700 1800 0000 0000 0100 ..9............. +000006d0: 0000 ff81 7500 0000 6669 6c65 732f 3155 ....u...files/1U +000006e0: 5405 0003 eac1 2762 7578 0b00 0104 e803 T.....'bux...... +000006f0: 0000 04e8 0300 0050 4b01 021e 0314 0000 .......PK....... +00000700: 0008 0067 6e2e 7de4 5506 6f33 0000 0039 ...gn.}.U.o3...9 +00000710: 0000 0008 0018 0000 0000 0001 0000 00ff ................ +00000720: 81e9 0000 0066 696c 6573 2f31 3355 5405 .....files/13UT. +00000730: 0003 42dc c088 7578 0b00 0104 e803 0000 ..B...ux........ +00000740: 04e8 0300 0050 4b01 021e 0314 0000 0008 .....PK......... +00000750: 0043 6c73 40e4 5506 6f33 0000 0039 0000 .Cls@.U.o3...9.. +00000760: 0007 0018 0000 0000 0001 0000 00ff 815e ...............^ +00000770: 0100 0066 696c 6573 2f35 5554 0500 033e ...files/5UT...> +00000780: 9867 4f75 780b 0001 04e8 0300 0004 e803 .gOux........... +00000790: 0000 504b 0102 1e03 1400 0000 0800 6740 ..PK..........g@ +000007a0: 3549 e455 066f 3300 0000 3900 0000 0700 5I.U.o3...9..... +000007b0: 1800 0000 0000 0100 0000 ff81 d201 0000 ................ +000007c0: 6669 6c65 732f 3355 5405 0003 32a1 e257 files/3UT...2..W +000007d0: 7578 0b00 0104 e803 0000 04e8 0300 0050 ux.............P +000007e0: 4b01 021e 0314 0000 0008 006e 5533 64e4 K..........nU3d. +000007f0: 5506 6f33 0000 0039 0000 0007 0018 0000 U.o3...9........ +00000800: 0000 0001 0000 00ff 8146 0200 0066 696c .........F...fil +00000810: 6573 2f38 5554 0500 03d0 9af4 7075 780b es/8UT......pux. +00000820: 0001 04e8 0300 0004 e803 0000 504b 0102 ............PK.. +00000830: 1e03 1400 0000 0800 3372 4173 e455 066f ........3rAs.U.o +00000840: 3300 0000 3900 0000 0800 1800 0000 0000 3...9........... +00000850: 0100 0000 ff81 ba02 0000 6669 6c65 732f ..........files/ +00000860: 3130 5554 0500 03f2 f86f 7f75 780b 0001 10UT.....o.ux... +00000870: 04e8 0300 0004 e803 0000 504b 0102 1e03 ..........PK.... +00000880: 1400 0000 0800 7561 6535 e455 066f 3300 ......uae5.U.o3. +00000890: 0000 3900 0000 0700 1800 0000 0000 0100 ..9............. +000008a0: 0000 ff81 2f03 0000 6669 6c65 732f 3755 ..../...files/7U +000008b0: 5405 0003 7e45 4e45 7578 0b00 0104 e803 T...~ENEux...... +000008c0: 0000 04e8 0300 0050 4b01 021e 0314 0000 .......PK....... +000008d0: 0008 0073 316c 46e4 5506 6f33 0000 0039 ...s1lF.U.o3...9 +000008e0: 0000 0007 0018 0000 0000 0001 0000 00ff ................ +000008f0: 81a3 0300 0066 696c 6573 2f32 5554 0500 .....files/2UT.. +00000900: 038a 9001 5575 780b 0001 04e8 0300 0004 ....Uux......... +00000910: e803 0000 504b 0102 1e03 1400 0000 0800 ....PK.......... +00000920: 306e 2179 e455 066f 3300 0000 3900 0000 0n!y.U.o3...9... +00000930: 0800 1800 0000 0000 0100 0000 ff81 1704 ................ +00000940: 0000 6669 6c65 732f 3132 5554 0500 035c ..files/12UT...\ +00000950: 51ed 8475 780b 0001 04e8 0300 0004 e803 Q..ux........... +00000960: 0000 504b 0102 1e03 1400 0000 0800 4233 ..PK..........B3 +00000970: 6333 e455 066f 3300 0000 3900 0000 0700 c3.U.o3...9..... +00000980: 1800 0000 0000 0100 0000 ff81 8c04 0000 ................ +00000990: 6669 6c65 732f 3655 5405 0003 fc1d 6a43 files/6UT.....jC +000009a0: 7578 0b00 0104 e803 0000 04e8 0300 0050 ux.............P +000009b0: 4b01 021e 0314 0000 0008 0073 7230 63e4 K..........sr0c. +000009c0: 5506 6f33 0000 0039 0000 0007 0018 0000 U.o3...9........ +000009d0: 0000 0001 0000 00ff 8100 0500 0066 696c .............fil +000009e0: 6573 2f39 5554 0500 03ea f34f 7075 780b es/9UT.....Opux. +000009f0: 0001 04e8 0300 0004 e803 0000 504b 0102 ............PK.. +00000a00: 1e03 1400 0000 0800 4043 336d e455 066f ........@C3m.U.o +00000a10: 3300 0000 3900 0000 0700 1800 0000 0000 3...9........... +00000a20: 0100 0000 ff81 7405 0000 6669 6c65 732f ......t...files/ +00000a30: 3455 5405 0003 88e8 ba79 7578 0b00 0104 4UT......yux.... +00000a40: e803 0000 04e8 0300 0050 4b01 021e 0314 .........PK..... +00000a50: 0000 0008 0069 2e74 63e4 5506 6f33 0000 .....i.tc.U.o3.. +00000a60: 0039 0000 0007 0018 0000 0000 0001 0000 .9.............. +00000a70: 00ff 81e8 0500 0066 696c 6573 2f30 5554 .......files/0UT +00000a80: 0500 0356 3ca5 7075 780b 0001 04e8 0300 ...V<.pux....... +00000a90: 0004 e803 0000 504b 0506 0000 0000 0e00 ......PK........ +00000aa0: 0e00 3a04 0000 5c06 0000 0000 ..:...\..... +``` + +so now i looked at the wikipedia article on the zip file format ([here](https://en.wikipedia.org/wiki/ZIP_(file_format)#Central_directory_file_header)) to find where the last modification time would be + +i used the `PK` strings to find the start of each central directory file header, and then looked at the file name to find which files are which and which order they go in + +so the flag is `ictf{Th1sFl@gI5C@m3lC@s3B3cau5eUnd3rsc0r3sAr3Ann0y!ng}`