Author
Message
shambles
Veteran
Joined: 23 Jun 2005 Posts: 129 Location: Galway, Ireland
yeah i did but i might just be screwin up the stegbreakthingy
_________________Shambles Likes Shiny Things
Posted: Fri Jun 24, 2005 9:27 am
ssjskipp˛
Boot
Joined: 23 Jun 2005 Posts: 39 Location: Somewhere under a rock.
shambles wrote:
all of the jpegs say ducky at the start, wtf?
Yes, where did you see this? I remember something I did with the jpegs, and I saw 'Ducky' and something else...
Posted: Fri Jun 24, 2005 9:32 am
shambles
Veteran
Joined: 23 Jun 2005 Posts: 129 Location: Galway, Ireland
in the first line of each jpg image in plain english it says "ducky". Is that normal for jpgs?
_________________Shambles Likes Shiny Things
Posted: Fri Jun 24, 2005 9:33 am
ssjskipp˛
Boot
Joined: 23 Jun 2005 Posts: 39 Location: Somewhere under a rock.
shambles wrote:
in the first line of each jpg image in plain english it says "ducky". Is that normal for jpgs?
yeah...that's where I saw it.. it also says JFIF and Adobe, or Adobed
Posted: Fri Jun 24, 2005 9:35 am
shambles
Veteran
Joined: 23 Jun 2005 Posts: 129 Location: Galway, Ireland
yeah just checked another unconnected image on my pc and it says ducky there too.Dead end
We need to unlock the news archive.
Anyone with MySQL experience?
_________________Shambles Likes Shiny Things
Posted: Fri Jun 24, 2005 9:36 am
ssjskipp˛
Boot
Joined: 23 Jun 2005 Posts: 39 Location: Somewhere under a rock.
You sure? I looked at one too, and I didn't see 'ducky'...
Posted: Fri Jun 24, 2005 9:37 am
shambles
Veteran
Joined: 23 Jun 2005 Posts: 129 Location: Galway, Ireland
yeah it doesnt appear on all of them but a fair few.
_________________Shambles Likes Shiny Things
Posted: Fri Jun 24, 2005 9:37 am
ssjskipp˛
Boot
Joined: 23 Jun 2005 Posts: 39 Location: Somewhere under a rock.
Here's an interesting tidbit
Quote:
Description:
Trojan.Ducky is a downloader Trojan that exploits the Microsoft GDI+ Library JPEG Segment Length Integer Underflow vulnerability (as described in the Microsoft Security Bulletin MS04-028).
XD that's after googling 'JPEG+Ducky'
Posted: Fri Jun 24, 2005 9:38 am
shambles
Veteran
Joined: 23 Jun 2005 Posts: 129 Location: Galway, Ireland
?
Someone else better check those jpegs we have then, looks like mine may be corrupted
Want me to post the wordlist I've been using?
Its various connected words numbers acronyms etc from the site and others I thought might apply.
_________________Shambles Likes Shiny Things
Posted: Fri Jun 24, 2005 9:40 am
ssjskipp˛
Boot
Joined: 23 Jun 2005 Posts: 39 Location: Somewhere under a rock.
This may just be me connecting random things, but it says 'for key 69' and thoes numbers appeared in that thing...thoes commments that I posted earlier
Posted: Fri Jun 24, 2005 9:42 am
shambles
Veteran
Joined: 23 Jun 2005 Posts: 129 Location: Galway, Ireland
yes, my bet is those comments can be used to find a message in the articles we'll find if we unlock the news archive.
LegionPharma.com is quite annoying, not enough is being posted to keep us working.
We need something interesting to happen.
_________________Shambles Likes Shiny Things
Posted: Fri Jun 24, 2005 9:43 am
rowan
Unfictologist
Joined: 12 Apr 2004 Posts: 1966
We were totally overthinking this. We don't need a password if we are using camo.
Pulled out 2 files of splash.jpg. One is 4.jpg which is the original name of the picture. The other is feeeedback!.gif. Haven't had a chance to take a closer look at it tho (damn phones at work).
Description
Filesize
17.63KB
Viewed
322 Time(s)
_________________
follow @arg_deaddrop on twitter
Posted: Fri Jun 24, 2005 11:12 am
Last edited by rowan on Fri Jun 24, 2005 11:15 am; edited 1 time in total
Russell
Unfictologist
Joined: 11 Feb 2005 Posts: 1571 Location: London
Dont worry about the Ducky comment, all it represents is that the picture has been manipulated with photoshop.
Posted: Fri Jun 24, 2005 11:13 am
anaerin
Unfettered
Joined: 25 Sep 2004 Posts: 391 Location: Regina, SK, CA Posts: 1337
Lookey what happens when you flood fill the feedback image with red...
Description
Hidden messages! Woo!
Filesize
16.31KB
Viewed
291 Time(s)
Posted: Fri Jun 24, 2005 11:24 am
anaerin
Unfettered
Joined: 25 Sep 2004 Posts: 391 Location: Regina, SK, CA Posts: 1337
Going to that URL (above) asks for a keyword.
As the front page says we need to solve for 9 keywords, I'd say we have our work cut out.
Posted: Fri Jun 24, 2005 11:27 am
Display posts from previous: All Posts 1 Day 1 Week 2 Weeks 1 Month 3 Months 6 Months 1 Year Sort by: Post Time Post Subject Author Ascending Descending