ROGUE AGENT - WRITEUP

The Anh



Link: https://hacktoria.com/contracts/rogue-agent

CHALLENGE DESCRIPTION:

Greetings Special Agent K. We have a request on our hands from our friends over at the CIA. In September of 2021, one of their operatives went missing in action. Upon further investigation, it was discovered this operative went rogue and started a smuggling business for the Russians. Mostly dealing in complex electronics, which have become difficult to come by for Russians after sanctions began.

The agent we’re looking for is named Valentino Maggi. Born in Brooklyn New York on 18.05.1987. Valentino is one of five sons of the Maggi family, who moved to the United States during World War II. Having grown up a middle class lifestyle, his father a car salesman and mother working as an elementary school teacher. Valentino was recruited into the CIA during his time as a student at Columbia University.

Most of his 10 years in active service were spent as an analyst working out of Langley. Recently though, in August of 2020, Valentino moved to oversees work. Being stationed in Italy as a liaison officer for the Italian foreign intelligence agency “Agenzia Informazioni e Sicurezza Esterna”.

Doing stellar work, right up until the point he went missing. Prompting an extensive investigation into his whereabouts. Documents were eventually found on his computer, recovered using forensics tools to recover deleted files. These indicate a heavy involvement with the Russian underground. Acquiring much needed microelectronics for the Russian government.

And that is where your task begins, Special Agent K. One of the files recovered from Valentino’s computer, is an image with a text file. We believe this to be the current location of Valentino Maggi. Locate the safehouse, so local authorities can raid the premises.

As always, Special Agent K. The contract is yours, if you choose to accept.
Find out the location and construct the password using the instructions below. This will allow you to open your flagfile and retrieve the Contract Card.

Password Instruction: country-town-coordinate

Password Example: spain-madrid-12.345678-12.345678



Text: The exact location is where you always find it.

SOLVE:

Bắt tay vào mình đã dùng các biện pháp reverse để tìm vị trí nhưng mà sau một hồi tìm kiếm thì mình nhận ra là không khả thi. Đề cho ta dữ kiện "an image with a text file" nên mình đã mở hình ảnh bằng Text Editor. Sau khi mở lên thì ta có thể thấy hầu như tất cả các dữ liệu thu được đều không đọc được và chỉ có ở dòng cuối có 1 đoạn kí tự và mình nghĩ đó là mật khẩu của file Contract Card:

  Tuy nhiên đọc lại đề thì thấy các kí tự đó không đúng với format password đề bài cho. Mình không biết đây là loại mã hoá nào nên copy sau đó bỏ vào Cyberchef và ngồi mò để giải mã :))) Sau một lúc thì mình đã tìm ra, đó chính là Rotate Right:


Như vậy là ta đã có password giờ giải nén file và lấy Contract Card nào :3