> For the complete documentation index, see [llms.txt](https://encient.gitbook.io/ctf-writeups-and-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://encient.gitbook.io/ctf-writeups-and-notes/ctf-platform/skr-ctf/steganography/a-thousand-words.md).

# A Thousand Words

## Description

A picture worth a thousand words...

Attachment: `github.com.jpg`

## Solution

```
strings github.com.jpg
```

Use `strings` command to view the printable text of the image.

<figure><img src="https://3139068166-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5otAmBnHXiDB0QXOOAMF%2Fuploads%2F9VXw1zMQqupkJSmd67DP%2Fa-thousand-words-1.png?alt=media&amp;token=00a761b3-8558-4cfd-b13a-6bf426fb9e94" alt=""><figcaption></figcaption></figure>

We can see that there is a line which is related to SKRCTF and flag. Since the image name is `github.com.jpg`, it kind of gives us a hint that this might be a URL.

<figure><img src="https://3139068166-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5otAmBnHXiDB0QXOOAMF%2Fuploads%2Fd4HHiOSSxp4CQEuMl5NG%2Fa-thousand-words-2.png?alt=media&amp;token=5ca2939c-60fe-443d-89a1-1cee2e3fd2a8" alt=""><figcaption></figcaption></figure>

Go to the [website](https://github.com/Hong5489/SKRCTF/blob/master/flag.jpg) and we will see that there is another image. Download and analyze it.

<figure><img src="https://3139068166-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5otAmBnHXiDB0QXOOAMF%2Fuploads%2FNQmZFYefy4jx3geQWrv8%2Fa-thousand-words-3.png?alt=media&amp;token=074e4513-1a09-474b-b439-e5edbab1ea18" alt=""><figcaption></figcaption></figure>

By using the same command which is `strings`, we will notice that there is a suspicious cipher in the last line of the image.

<figure><img src="https://3139068166-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5otAmBnHXiDB0QXOOAMF%2Fuploads%2FuqIRnqWkUxyQyeETG81y%2Fa-thousand-words-4.png?alt=media&amp;token=71e1f229-fc46-4bbb-92db-9c203842b7e8" alt=""><figcaption></figcaption></figure>

Put it into [CyberChef](https://gchq.github.io/CyberChef) and decipher it. CyberChef is a useful tool for CTF players for cryptographic operations like decoding and decrypting. By decoding 3 times of Base64, the flag will be shown in the output section.
