PicoCTF Writeup – Flags

# Information:

CTF Name: PicoCTF

CTF Challenge: Flags

Challenge Category: Cryptography

Challenge Points: 200

PicoCTF 2019.

# Used Tools:

  • Linux
  • Flag Identifier

# Challenge Description:

What do the flags mean?

Hints:

Hint 1
The flag is in the format PICOCTF{}

# Writeup:

In this challenge we are given an image, which is presented in the link on the word “flags” in the description. Below you have the image itself:

Image 1

With the hint it is possible to understand that these symbols represent letters and the 7 first flags represent P I C O C T F respectively.

We also know that these 7 flags are repeated throughout the flag. So we know the following:

Image 2

As you can see in image 2, we already know some letters but we need to find the other ones that we don’t know. To do that I used a flag Identifier because I don’t know that much about flags 🤫

So, I went to the site and inserted the shapes and colors and I did found the names of the flags. You can see that in the images below:

Image 3
Image 4
Image 5
Image 6
Image 7

As you can see this flag identifier helps a lot when it comes to finding the flags.

We insert the letters in the fields to which they belong and we are left with the following:

Image 8

Probably you are asking yourself why didn’t she and he inserted the images with the correspondent letter of the flags 9, 12 and 16. Well, we didn’t inserted those images because we didn’t found those flags in the flag identifier. But fear not because we have information that can be useful to find the flags 9, 12 and 16. That information is the usage of the flags. As you can see in the images 3 to 7, all the flags are used in nautical. So, we can assume that the 9, 12 and 16 are to.

So, we search for “nautical flags” and we did found the names of the flags on Wikipedia. You can see this in the image below:

Image 9
Image 10

Now you can put all together and it will be like so:

The flag is:

Show flag
PICOCTF{F1AG5AND5TUFF}


Thank you very much for reading!

Cheers,

SoBatista & MRegra


Leave a Reply

Your email address will not be published. Required fields are marked *