Agree
Category: MISC
Starting out you have this description:
I hope you like our Terms of Service and Privacy Policy of our website!
- Nothing to click on or download.
Since there are no links, this means you have to find what they want you to find. So a quick look around the website shows there is nothing in any of the tabs that had a ToS or Privacy Policy, But I did notice that when I went to a link on the website, thee category of the link I used was in plain text at the end of the URL. So I tried playing with at and typing ToS at the end of the main website URL. BAM, there was the first half of the flag.
WAVE
Category: Forensics
To start out you are given this description:
The Wave is not audible, perhaps corrupted? Note: Wrap the flag in n00bz{}. There are no spaces in the flag and it is all lowercase. Author: NoobMaster.
- It also has a .wav file that you must download and it also appears to be corrupted.
I tried to listen to the file, but nothing will import it. Based on the description, its safe to say the file is corrupted.
So immediately after some research, I found out that you can use an application called Audacity to import as raw data. Doing this allows you to hear whatever is in the file. Sadly, its all just a mess of noises.
This was a fun flag to remind people to use KISS (keep it simple, stupid) when approaching things like this.
For the second I used "privacy" at the end and that gave me the rest.
At this point, I'm unsure if there is a hidden message, but slowing the track down and playing, you can see patterns and hear beeping that sounds like Morse code. Here was the message I could get in Morse code:
-... . . .--. -... --- .--. -- --- .-. ... . -.-. --- -.. .
After running it into a translator because I wasn't raised during WWII and had a cell phone most of my life, I got the message "BEEPBOPMORSECODE".
There is the flag!
This flag was really fun. It made me think outside the box while learning a new tool.
Contact
ken.frankum93@gmail.com