Glory of the Garden (Category Forensics - picoCTF)

Title: A secret message encrypted inside the image.

Description of the Vulnerability: The image contains a secret message encrypted inside it.

Summary: In the picoCTF Glory of the Garden challenge, we were able to get the flag by uploading the image on HexEd.it platform.

The technical investigation finished at 8:40 UTC, concluding that there was no malicious intent or indicators of exploitation.

Steps to reproduce:

1. Click on the Garden button.

2. Open HexEd.it.

3. Open the image in HexEd.it.

4. Press ctrl + F for finding and search pico in it.

5. You will get the flag.

Impact:

Got the flag by uploading the image on HexEd.it.

POC (Proof of concept):

FLAG: picoCTF{more_than_m33ts_the_3y3eBdBd2cc}

Ad