下载压缩包,解压出图片
Binwalk
跑一下
DECIMAL HEXADECIMAL DESCRIPTION
0 0x0 JPEG image data, JFIF standard 1.01
30 0x1E TIFF image data, big-endian, offset of first image directory: 8
5236 0x1474 Copyright string: “Copyright Apple Inc., 2018”
218773 0x35695 Zip archive data, encrypted at least v2.0 to extract, compressed size: 34, uncompressed size: 22, name: flag.txt
218935 0x35737 End of Zip archive, footer length: 22
发现zip,用dd
分割
dd if=ada.jpg of=1.zip skip=218773 bs=1
if=输入文件
of=输出文件
skip=跳过blocks
分割出来了一个zip,打开,发现需要密码
查看原图的属性,发现照相机型号很可疑
73646E6973635F32303138
没有一个超过F的,目测16进制,直接Hex转Text
sdnisc_2018
解压出来,发现flag
flag{3XiF_iNf0rM@ti0n}