Tags: misc 

Rating:

Clicking on the link provided we a .dd file which has a really long name. So, i renamed the file as file.dd. binwalk on the .dd file to extract known file types.Looking at the strings list having a look at printable values after the “IEND” we get there 3 strings(“Spac”,”3ei2”,”herE”). Concatenating all the three strings we get the “Spac3ei2herE”string which is the password to unlock the RAR file to view the final.png.

Original writeup (https://medium.com/@naveenramesh915/plaidctf-2019-write-ups-53876c9a75eb).