> For the complete documentation index, see [llms.txt](https://rayyanwong.gitbook.io/rayyan/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://rayyanwong.gitbook.io/rayyan/ctfs/lag-n-crash-2022-march/lnc2022-writeups/handsomehero-forensics.md).

# HandsomeHero ( Forensics )

Challenge: HandsomeHero

![](https://lh6.googleusercontent.com/i4-fAjU8PdTTLsEV2qYIAjypIsXnkl91LU2ID7Q1nleDQEKNmf2MvjCO0kLQItZYo8p8fIHE0Ty5VcJ9NEqfbd7fzPzpUrzX6Q2iAPQIELo5-0sA-oZ3KiJSdWdrupQMN4TqHVkn)

Given the above image, exif data gave us his name Bae In Hyuk.

Since we are tasked to find out the hidden file in this, I tried to find clues in the hexdump of this jpeg image but there wasn’t much useful information.

![](https://lh4.googleusercontent.com/Z44aXzfwIQRCtXYFH1qYCP5OIaWLaQR-OVIrs66jGD-ToSrSmEO9Ax8brTUiBPDHahUWZHUMYyRWC4zZx9EHFCIyzXD5LhqS3iU6Go763KJtxUeihcVeTF5WE9rLTb86_0khnThv)

Using steghide to find the basic info of b.jpg

![](https://lh6.googleusercontent.com/dQ3HQb29NTZoQLg2TV7v6mXmoPEMkb6Cr5AYA59R4g003LDRVwoa0TSam3Ynj5brSGE2AtKgjg5rRYNrATdGhW3wBjAeQ6tela03C6CAPmlHyIMuj8-nv2C9Zi8Wb8WNruiC0vKg)

Extracting hidden data from b.jpg but in order to obtain the file we have to provide a passphrase.

Passphrase: baeinhyuk

Extracted flag.txt file

![](https://lh5.googleusercontent.com/Sg9EGNZU3EJYHg0gcca8ok9ELD5MzWiy4DMfr5yrvV97TA5FUeR6iMMPAVrFtTfO3-jhIpD6BIAaDEMyznwjUgWesX8w2jdUVA-ZC-nRn3Y_Ns_gUp94kzfm0SdENDXPT5vUUkC0)

Cat to reveal the contents in flag.txt file.

![](https://lh3.googleusercontent.com/V5qveFRviP53ATtBZ_OEd9EkZoP9wiuxd1rqRWVzYn0W0EyshokH7SR8pZ035kq0aDVhO9JzMqdr1TIWAzpkH04GpacweT-rxVzJ-j7h1jPWSv4kZt7XCd2ROSbrwGdKYDQk-iRR)converting the hexadecimals in the .txt file to obtain flag

<mark style="color:blue;">**`LNC2022{gumiho}`**</mark>