Contents

E-CTF - Forensics - THE CAT KNOWS THE CULPRIT


Forensics - THE CAT KNOWS THE CULPRIT writeup

Description

Detective Jake Peralta and his partner Charles Boyle are assigned a Grand Larceny case, by their captain Raymond Holt. Upon their arrival to crime scene they find that there are no clues for them to catch the victim, so they leave the crime scene and at the exif exit door they find an featuredImage along with a note saying “THE CAT KNOWS THE CULPRIT.”

Writeup

Ok so what we got here is a jfif file.

A quick google search tells me this:

A JFIF file is a bitmap graphic that uses JPEG compression.

Ok so we just have a jpeg file here.

The first thing I did was to check with steghide for any steganography. Negative.

Then I just opened the jfif file in gHex to look at the bytes.

After that I could directly see the flag

1
CTF{It_1s_D0UG_JUdY}