Templed

Instructions

I found the following message in a temple, I had the sensation that they were hiding something. Could you help me discover what it was?


Solution

Ok, the first thing I did was unzip the file, and I saw that it was a .png. templed-1 Running file against it verified that it was a PNG. templed-2 Ok, but trying to get the exif data failed, it doesn’t appear actually be a PNG, or at least doesn’t conform to the specification. Weird. templed-3 I used the following command to slice the xxd dump into just the hex byte portion.

cat Scroll.xxd | awk -F " " -p '{print $2" "$3" "$4" "$5" "$6" "$7" "$8" "$9}' > Scroll.hex

Wait what the fuck. Ok, I got threw the hexdump into CyberChef, and found out it actually has a render tool! Rendering the image gave me some weird shit. Pasted image 20220911184807 Running the Extract Files tool in CyberChef found a .zlib?

Super weird. Ok, If I google symbol cipher, one of the first image results is for "The Ciphers of the Monks". The symbols look the same, and Temple == Monks… Pasted image 20220911184834

So these things obviously are numbers. The wind up being:

72 84 66 123 77 48 78 107 115 95 107 78 51 119 33 125

I throw the string back in to CyberChef and run the Magic task on it. One of the From_Decimal results looks almost like a flag. Pasted image 20220911184900 Thanks to that, I add the From_Decimal tool to my recipe. I didn't need to change any other character encoding or anything, running that recipe gave me the flag. Pasted image 20220911184918


Next Weak RSA