Skip to content

Instantly share code, notes, and snippets.

@johncantrell97
Last active March 24, 2020 22:57
Show Gist options
  • Save johncantrell97/8b605f70b9fabf62eb70a6d3c5389e99 to your computer and use it in GitHub Desktop.
Save johncantrell97/8b605f70b9fabf62eb70a6d3c5389e99 to your computer and use it in GitHub Desktop.
How To Obtain The Leporine Key

Hello again.

I was not the first to find the key this time, props to EnigmaZer0 for this one! After seeing that everyone enjoyed understanding how the first clues were solved I thought I'd provide an explanation for The Leporine Key.

The second clue dropped early afternoon EDT on (easter) Sunday April 21 2019. The clue can be viewed on the satoshis treasure website here and looked like this:


 _____       _            _     _ _       _____
/  ___|     | |          | |   (_| )     |_   _|
\ `--.  __ _| |_ ___  ___| |__  _|/ ___    | |_ __ ___  __ _ ___ _   _ _ __ ___
 `--. \/ _` | __/ _ \/ __| '_ \| | / __|   | | '__/ _ \/ _` / __| | | | '__/ _ \
/\__/ / (_| | || (_) \__ \ | | | | \__ \   | | | |  __/ (_| \__ \ |_| | | |  __/
\____/ \__,_|\__\___/|___/_| |_|_| |___/   \_/_|  \___|\__,_|___/\__,_|_|  \___|


.------------------------------------------------------------------------------------.
|                                                                                    |
|                            FOLLOW THE CRAZY RABBIT                                 |
|                                                                                    |
|       Congratulations to the Hunters who congregated at the locations indicated    |
|       in my first transmission and found the first keys of the Hunt. A hearty      |
|       congratulations as well to the few who realized that travel in meatspace     |
|       was not entirely necessary to find these keys. While parts of the Hunt are   |
|       solitary endeavours, most of the time you will need to work together as a    |
|       clan to pull ahead. This next challenge is solvable for an individual only   |
|       at considerable expense; for a group it is nothing but a simple test of      |
|       cohesion and trust.                                                          |
|                                                                                    |
|       In my hunt, as in life, remember that nothing is what it seems.              |
|                                                                                    |
|                                                                                    |
'------------------------------------------------------------------------------------'

The second clue contained a link to this gif:

leporine gif

which is a choppy scene containing bugs bunny and a close-up of a human face. In the clue, the link to this gif said "nothing is what it seems". This was the first hint that what we were looking at (a gif) was probably more than just a gif.

The first thing I did was download this gif so I could analyze it

wget https://satoshistreasure.xyz/images/leporine.gif

The next thing I like to do in puzzles like these is use a tool called binwalk to analyze a file's hex to see what other files it might contain.

binwalk leporine.gif

The output of the binwalk tool looks like this:

binwalk output

We can clearly see that the file is made up of a GIF and a ZIP file. The next step was to extract the zip file from this file. We can use a binwalk feature to extract a file and execute a command. From the binwalk help doc:

-D, --dd=<type:ext:cmd>      Extract <type> signatures, give the files an extension of <ext>, and execute <cmd>

Using this information we can construct a binwalk command to extract and unzip the embedded file:

binwalk --dd='zip archive:zip:unzip %e' leporine.gif

This tells binwalk to find zip archive files and extract them with a zip extension and then execute unzip %e where %e is a placeholder for the extraced filename. After running the command binwalk will create a directory _leporine.gif.extracted that contains our files.

If we look at the extracted leporine.txt file:

cat _leporine.gif.extracted/leporine.txt

We see the following clue:

https://satoshistreasure.xyz/eggseggseggseggsfortheeggmangetyoureggs

Use the Jade Key to open the lock

We know from the previous puzzles that the Jade Key is ST-0001-a36e904f9431ff6b18079881a20af2b3403b86b4a6bace5f3a6a47e945b95cce937c415bedaad6c86bb86b59f0b1d137442537a8.

eggs

When we use this key to decrypt the page we get this page with this text:

 _____ _            _____              _   _             _     _       _____       
|_   _| |          |  ___|            | | | |           | |   (_)     |  _  |      
  | | | |__   ___  | |__  __ _  __ _  | |_| |_   _ _ __ | |_   _ ___  | | | |_ __  
  | | | '_ \ / _ \ |  __|/ _` |/ _` | |  _  | | | | '_ \| __| | / __| | | | | '_ \ 
  | | | | | |  __/ | |__| (_| | (_| | | | | | |_| | | | | |_  | \__ \ \ \_/ / | | |
  \_/ |_| |_|\___| \____/\__, |\__, | \_| |_/\__,_|_| |_|\__| |_|___/  \___/|_| |_|
                          __/ | __/ |                                              
                         |___/ |___/                                               



.--------------------------------------------------------------------------------------.
| The Jade Key slides into the lock with no play, and turns at the slightest pressure  |
| A soft click as if from far away comes from the lock mechanism, and it swings open   |
| to reveal an empty vault, with a scrap of old paper on the floor. You pick it up and |
| read the careful handwriting: "it's time to go and stock up on eggs for the Rabbit:  |
| https://happyfactory.store/collections/home/products/colorful-easter-egg             |
'--------------------------------------------------------------------------------------'

When we visit this product page for the egg we see the next clue:

This is a digital egg that will be delivered to your email inbox at rapid speed by a fleet of delivery rabbits. 
There are 8 limited edition versions of the egg, and a surprise awaits anyone who can put all of them together. 
all revenue from egg sales will be converted to Bitcoin and sent to the Hunt Pot.

This is the first clue where being in a team appears to be very helpful. This suggests there are 8 secrets that we need to collect from buying eggs. It's not clear if each egg you buy guarantees a unique secret. Unfortunately, this part of the puzzle cannot be played again as the eggs are sold out.

If you bought enough eggs (or had teammates to help you out) you would eventually start receiving your secrets delivered to the email address you used at checkout. After gathering all 8 pieces you are able to fully reconstruct the egg image:

egg

If you scan the QR code you get the following message:

satoshistreasure.xyz/6WskbAMc8U6m3B68DdHL2QQ822odpPG pass="a dim light illuminated the darkness, casting shadows on the walls and revealing a single key hanging from a thread in the middle of the vault"

Visiting the URL and entering the provided password reveals the congratulations page for the Leporine Key!.

      _____                            _         _       _   _                 
    / ____|                          | |       | |     | | (_)                
   | |     ___  _ __   __ _ _ __ __ _| |_ _   _| | __ _| |_ _  ___  _ __  ___ 
   | |    / _ \| '_ \ / _` | '__/ _` | __| | | | |/ _` | __| |/ _ \| '_ \/ __|
   | |___| (_) | | | | (_| | | | (_| | |_| |_| | | (_| | |_| | (_) | | | \__ \
    \_____\___/|_| |_|\__, |_|  \__,_|\__|\__,_|_|\__,_|\__|_|\___/|_| |_|___/
                      __/ |                                                  
                     |___/                                                   
                        _    _             _            
                       | |  | |           | |           
                       | |__| |_   _ _ __ | |_ ___ _ __ 
                       |  __  | | | | '_ \| __/ _ \ '__|
                       | |  | | |_| | | | | ||  __/ |   
                       |_|  |_|\__,_|_| |_|\__\___|_|   
                                                      
                                                      
.--------------------------------------------------------------------------------.
|                            - Key Fragment # 004 -                              |
.                                                                                .
|                                                                                |
.                                                                                .
|                                                                                |
.                                                                                .
|                                                                                |
.                                  THIS KEY IS DIGITAL TREASURE, A PRECIOUS      .
|                                  FRAGMENT OF AN ANCIENT KEY WHICH UNLOCKS      |
.                                  UNTOLD RICHES. STORE IT SOMEWHERE SAFE        .
|                                  UNTIL YOU CAN FIND 399 MORE                   |
.                                                                                .
|                                                                                |
'--------------------------------------------------------------------------------'

I envy them, Mamoru -- the humans on the cusp. Their journeys required them to actually JOURNEY, 
instead of just blinking through the interstellar foam. Back then, you could still solve a puzzle
on your own, instead of just feeding it to the Omniform... 
Oh, perhaps I'm wrong. But I think they must have been happier. (Intercept from ST291 Transmission)

That was a fun one!

If you weren't aware of the binwalk tool there was another less technical way to figure out about the zip file. You can use a tool to split the gif into single frames like this one. You can then downloaded the frames for further investigation. This gif generated 110 frames from the split tool. You can slowly step through each frame scanning for some kind of clue until you come to frame 32:

frame32

It's hard to see but if you zoom in you will see the words "UNZIP IT" written underneath each eye. This combined with our previous clue "nothing is what it seems" makes it clear that this gif contains a zip file that we need to unzip.

You can then just run

unzip leporine.gif

The unzip tool is able to extract the file even with the gif data at the beginning because zip extraction starts from the end of the file. You will be provided with the leporine.txt file after unzip is finished and can continue the rest of the guide from there.

@johnnysweats
Copy link

WOW. thank you for this awesome breakdown. ONCE AGAIN!!! so cool.

@macrobody
Copy link

Nice, and I learned something too.

@dergigi
Copy link

dergigi commented Apr 23, 2019

Eggselent summary <3

@SamSamskies
Copy link

Whoa. Totally didn't see the "UNZIP IT" under the eyes. Your write ups are 🔥.

@M4N0V3Y
Copy link

M4N0V3Y commented Apr 24, 2019

@johncantrell97 you did the nice job again! Congrats budy!

@0p3nG4t3
Copy link

The provided password? I don't think you ever actually included the password for the final page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment