Skip to content

Instantly share code, notes, and snippets.

@404d
Forked from Taqiyeddine/bkpctf16_lilyflac
Created March 8, 2016 12:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save 404d/9e4bd7ad5424a416f723 to your computer and use it in GitHub Desktop.
Save 404d/9e4bd7ad5424a416f723 to your computer and use it in GitHub Desktop.
Writeup for lily.flac of BKPCTF 2016

At first I thought this was a DSP problem. It wasn't. The solution was much simpler.

To start, I listened to the entirety of the song. It's not quite everyone's favorite genre, but I rather enjoyed it. I noticed a short burst of static at the beginning. Static typically means data, but I figured I'd look for other patterns.

Some GNU Radio later showed that there were no obvious patters in the spectra of the signal or in the relation of the right and left channels.

Initially, I incorrectly converted the file to a raw type. In the converted file, there was obviously some data at the very beginning in the burst of static, but it wasn't readable as anything.

I re-did the conversion to raw and looked again. The static was an ELF for linux x86_64. Thinking it couldn't be that easy, I threw it into IDA. It's a binary that grabs samples from the raw audio and prints the samples out as characters.

duck:~$ sox lily.flac lily.raw
duck:~$ chmod +x lily.raw
duck:~$ ./lily.raw
BKPCTF{hype for a Merzbow/FSF collab album??}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment