The weekend of 04\/01\/2016 is pre-qualification for the Nuit du Hack 2016<\/a><\/strong>\u00a0as a Jeopardy CTF<\/strong>. Having had the opportunity and the time to participate with some colleagues and friends, here’s a write-up resolution of the challenges which we could participate.<\/p>\n Listening to the wav file, the voices of the Simpsons are audible and understandable. There is noise, however, in the background, which seem to be repeated periodically.<\/p>\n We can choose\u00a0our best tool for audio file analysis, particularly for spectral data visualization. In this context, the free tool “Sonic Visualiser<\/a>” (currently version 2.5) allows these spectrals analysis better than Audacity, especially for audio steganography.<\/p>\n We open “Sonic Visualiser” and we load our file “simpsons.wav”. It appears thereafter spectrum via “Pane \/ Add Spectrogram \/ Mixed”<\/p>\n Spectral visualisation<\/p><\/div>\n <\/p>\n Oh ! A cute smiley!<\/p>\n But what follows our smiley? These small bars that seem to repeat almost all along the trail, would that cause noise that periodically is meant to listen to the sound clip?<\/p>\n Zoom\u00a0a bit on the spectrum:<\/p>\n Zoom\u00a0spectral<\/p><\/div>\n <\/p>\n This looks suspiciously like an alphabet … Yes, but which? In what language these symbols in the form of “points” must be translated?<\/p>\n Could this be the braille? It would be this, especially as the smiley wear glasses\u00a0which is a strong indication! Seek a correspondence table of the alphabet in Braille:<\/p>\n Alphabet Braille<\/p><\/div>\n Promising! Let’s start translating our spectral track:<\/p>\n Traduction braille<\/p><\/div>\n String translated\u00a0:<\/p>\n Given this number string prefixed with # (indicating a number), the link is quickly made with the era before the smartphone including SMS. Yes, this code corresponds to an SMS. It’s time to get out our good old Nokia 3210:<\/p>\n Win ! Flag : #NDHATSIXJRIXJMUE<\/strong><\/p>\n Greeting to\u00a0nj8<\/a>, St0rn<\/a>, Emiya<\/a>, Mido, downg(r)ade,\u00a0Ryuk@n and\u00a0rikelm, ? \/\/ Gr3etZ<\/p>\n Sources & ressources :<\/strong><\/p>\n <\/p>","protected":false},"excerpt":{"rendered":" Write-up of the challenge “Steganalysis – Stegano Sound” of Nuit du\u00a0Hack 2016 CTF qualifications. The weekend of 04\/01\/2016 is pre-qualification […]<\/p>\n","protected":false},"author":1337,"featured_media":1963,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58,57,56,524,523,526,527],"tags":[469,468,472,471,470],"class_list":["post-1976","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptanalyse","category-cryptographie","category-cryptologie","category-ctf","category-events","category-ndh","category-ndh2k16","tag-jeopardy","tag-quals","tag-stega-sound","tag-steganalysis","tag-steganography"],"_links":{"self":[{"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/posts\/1976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/users\/1337"}],"replies":[{"embeddable":true,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/comments?post=1976"}],"version-history":[{"count":5,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/posts\/1976\/revisions"}],"predecessor-version":[{"id":2009,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/posts\/1976\/revisions\/2009"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/media\/1963"}],"wp:attachment":[{"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/media?parent=1976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/categories?post=1976"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.asafety.fr\/en\/wp-json\/wp\/v2\/tags?post=1976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
![\"Visualisation](\"https:\/\/www.asafety.fr\/wp-content\/uploads\/01-2-300x159.png\")
<\/a>![\"Zoom](\"https:\/\/www.asafety.fr\/wp-content\/uploads\/03-2-300x89.png\")
<\/a>![\"Alphabet](\"https:\/\/www.asafety.fr\/wp-content\/uploads\/Braille-300x300.jpg\")
<\/a>![\"Traduction](\"https:\/\/www.asafety.fr\/wp-content\/uploads\/02-2-300x70.png\")
<\/a>#6634428777744499577744499568833<\/pre>\n
![\"Nokia_3210\"](\"https:\/\/www.asafety.fr\/wp-content\/uploads\/Nokia_3210-122x300.jpg\")
<\/a><\/p>\n\n