Oversharing

Category
Forensics
Points
-1
Solves
-1
Tags

Yo man wassup,

I am so excited, finally passed my probation. Just got assigned to this new high impact project. The IT guy just gave me my account for the project, check out the chat! Can’t wait to login and show my worth :D

by BerlianGabriel


We are given a file called Oversharing.png, which contains a chat image between the sender and the receiver. When I examined the bytes of the image, I found something interesting: there are two IEND markers within the byte sequence of the image.

alt text

After further investigation, I discovered that this PNG image had been modified. I tried removing the second IEND and saved it as a new PNG file, but nothing happened.

Because the image appeared to be cropped, I decided to search Google using the keyword Image cropped writeup. I found a writeup that explained how to restore a cropped PNG image, which was caused by a bug known as aCropalypse. This bug existed in a screenshot application on Android. The bug allowed users to edit images and save them, but the saved image did not fully erase the original parts of the image. In other words, the edited image still contained portions of the original image that were supposed to be removed.

So, we can use the website acropalypse to restore the cropped image. Select Pixel 5 and upload the image to the website. Once processed, we will get the full image that had been cropped.

f1d04039-de88-4728-9659-7ccc97d2712b

Oversharing Flag: FindITCTF{CVE-2023-21036_Hk3MQu1gR3}