Hey, I’m doing the MVS Forensic CTF and they have ciphers to do while waiting for the main questions to release on 26 Feb.
I was able to get 6/7 ciphers but the 2nd last one isn’t making sense to me.
I’ve tried DeepSound, Audacity for the spectrograph, Sonic Visualizer, and boosting the last 5s of audio but it gives me a headache so I‘m not able to figure out what’s being said. I’ve also tried various versions of int80, some other linux commands, and versions of “HideNSeek”.
I dont know the answer, but can give you some guess I would try
You probably worked it out,
Bonsoir Elliot will be a Mr Robot reference, maybe the passphrase or a variation there of…
Lets look at the clues
It’s not that Deep, just Sound it out (shout out to int80)
Break them down to 3 seperate parts
“It’s not that Deep”
To me, that woukd suggest to NOT use DeepSound
“just Sound it out”
To me i think phonetics, shorthand or stenography.
Maybe like the game MadGab
You read some words and it sounds like another…
Easier for the listener than the speaker
(shout out to int80)
I’m shit at linux, but int means interrupt correct?
So could that be pause at 80secs?
its “shouted out” / said at 80sec >
Also in parenthesis () That could be the bit you analyze / isolate
There was a hidden challange on the TV show Archer, season 6 that I did, it had a hidden .wav file, if I recall correctly, the sound file created a visual word and url to follow for the next clue.
You said you used Audacity, That is what I used,
Try the Spectrogram function, and try changing the frequency
were there any peaks at 80sec that maybe infrasound or ultrasound?
even compressed?
Oh, also try changing the resolution of the window.
Im not sure which, but toghle between linear and logarithmic, one setting I could see the clue, the other I couldn’t
Hopefully at least some of that may be of use…
Good luck.
keep us up to date
It’s referring to int 0x80 and that’s an x86 software interrupt instruction, not a Linux thing. But in Linux, on the x86 architecture, it’s the interrupt used for syscalls.
Maybe the answer is just 0xCD80 which should be the opcode for int 0x80? Or it’s syscall?
I couldn’t find anything in the wav file with the spectrograph, mostly cuz looking at it so much is giving me headaches, but I tried your suggestions and none were correct.
It’s probably something super simple and I’m just overthinking it, all the others were pretty easy.
Even the last cipher worth the most points only took me about 10 mins to figure out lol
The lyrics first letter line up differently on each device but the Cyrillic “е” is there on every device.
The “е” is “Ye” has a history of being a variant of Ukrainian Ye.
Unfortunately that points me back to the end 5s where it sounds like “Ye ye” (or some version) is being said.
I tried to mess with Audacity settings but nothing is legible enough to match it to real letters. All the settings I’ve tried make everything look like “8”, “W”, “U“, “H“, "or “B” which doesn’t mean anything to me.
Yea I got “RIFFæýÄWAVEfmt D¬±dataÀýÄ” out of the hex which didnt make sense to me.
Also tried the wikileaks route “Snowden’“, “Edward Snowden”, “Vault7”, etc and no luck.
When I’m messing with the spectrograph I swear I see “WWW” (or a short sentence) very faintly but everything i try doesnt bring out text clear enough to match it to any letters/symbols”
This (screenshot) looks like it could be 2 letters, 4 letters, then 4-6 letters but nothing gets it clear enough to read.
Use Ghidra, add the exe, analyze the exe, then open the exe with CodeBrowser.
In Ghidra, filter for “png” in the PE resources menu, there’s some png files, the smaller one (1.892 kb) has a PDF417 barcode. Scan the barcode and you’ll get a 60 character password.
Enter the password (moo.exe “×××60×××”), then that password reveals the flag URL.
Also, I appreciate the help. I’m gonna go through the 5th cipher to figure out how the URL is found, but it was driving me crazy and the searching was giving me migraines lol
I can give you a hint, if you could please help give me a hint for ‘Cows come in all shapes and sizes’…I will say that the Mr. Robot is a huge clue…I wonder if there was a program he used to hide info in a song again… this may sound deep
again… this may sound deep