Magnet Virtual Summit 2020 CTF (Egg Hunt) - Stark 4N6

Monday, June 1, 2020

Magnet Virtual Summit 2020 CTF (Egg Hunt)

Magnet Forensics put on another amazing CTF for their user (virtual) summit this year. Much thanks to the students from Champlain for the challenge. Now that the competition is officially over, I am finally getting around to dropping some walkthroughs on how I found the answers. First up is the Egg Hunt!

Egg Hunt

Quit ROMAN around and find the ONE egg (5)

NOTE: The FULL block of text below IS the puzzle, for each level, please copy the NEW block of text located below the now decoded portion.


What is the color of the first egg?
Puzzle starts here (Copy ALL text below):
Zpv ibwf gpvoe uif CMVF fhh! Uif ofyu qjfdf pg uif qvaamf jt: Mci vojs tcibr hvs UFSSB suu (gsqfsh kcfr = Cbwcb)... hvs bslh dwsqs ct hvs dinnzs wg : KK91WUvvraIuNa91paEurUvzWS9GEI5VFGPzN2qiZw4urUvzWU5zsVEuqUzzM2Iup2MurUvzWVP1sbdgNGPdqmOco2J5WR0upKTbpaJ0YHcYo29vWVJzp3SuNbJcqbquNavfWUJdrmPlN20iZw4uN2l4WVdzNUqurUXlM2guMacupLFzWVNcNVB4NGPjNxcYMaJ5rU9ho2SvWU5gpQPcqVz5rmPhNbcupLvjM2zlWU9arQ4iZwPhNbcupaT6swPzpRcuqav6qkcY


Loading into CyberChef, we can see it's ROT13 with a -1 rotation (can also be 25).


https://gchq.github.io/CyberChef/#recipe=ROT13(true,true,-1)&input=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


Results show that the flag is BLUE.

You have found the BLUE egg! The next piece of the puzzle is: Lbh unir sbhaq gur TERRA rtt (frperg jbeq = Bavba)... gur arkg cvrpr bs gur chmmyr vf : JJ91VTuuqzHtMz91ozDtqTuyVR9FDH5UEFOyM2phYv4tqTuyVT5yrUDtpTyyL2Hto2LtqTuyVUO1racfMFOcplNbn2I5VQ0toJSaozI0XGbXn29uVUIyo3RtMaIbpaptMzueVTIcqlOkM20hYv4tM2k4VUcyMTptqTWkL2ftLzbtoKEyVUMbMUA4MFOiMwbXLzI5qT9gn2RuVT5foPObpUy5qlOgMabtoKuiL2ykVT9zqP4hYvOgMabtozS6rvOyoQbtpzu6pjbX

Last one there is a ROTten egg (5)

What is the special word?

Throwing the next one in CyberChef, we see ROT13 again, this time with the regular 13 rotation.

https://gchq.github.io/CyberChef/#recipe=ROT13(true,true,13)&input=TGJoIHVuaXIgc2JoYXEgZ3VyIFRFUlJBIHJ0dCAoZnJwZXJnIGpiZXEgPSBCYXZiYSkuLi4gZ3VyIGFya2cgY3ZycHIgYnMgZ3VyIGNobW15ciB2ZiA6IEpKOTFWVHV1cXpIdE16OTFvekR0cVR1eVZSOUZESDVVRUZPeU0ycGhZdjR0cVR1eVZUNXlyVUR0cFR5eUwySHRvMkx0cVR1eVZVTzFyYWNmTUZPY3BsTmJuMkk1VlEwdG9KU2FvekkwWEdiWG4yOXVWVUl5bzNSdE1hSWJwYXB0TXp1ZVZUSWNxbE9rTTIwaFl2NHRNMms0VlVjeU1UcHRxVFdrTDJmdEx6YnRvS0V5VlVNYk1VQTRNRk9pTXdiWEx6STVxVDlnbjJSdVZUNWZvUE9icFV5NXFsT2dNYWJ0b0t1aUwyeWtWVDl6cVA0aFl2T2dNYWJ0b3pTNnJ2T3lvUWJ0cHp1NnBqYlg

Results show the special word was Onion.

You have found the GREEN egg (secret word = Onion)... the next piece of the puzzle is : WW91IGhhdmUgZm91bmQgdGhlIE9SQU5HRSBlZ2cuLi4gdGhlIG5leHQgcGllY2Ugb2YgdGhlIHB1enpsZSBpcyAoa2V5ID0gbWFnbmV0KToKa29hIHVlb3EgZnVocncgZmhrIGVpdyBxZ20uLi4gZ2x4IHplZGcgdGJxY2sgYmogbXRlIHZoZHN4ZSBvZjoKYmV5dG9ta2EhIG5sbCBocHl5dyBtZnogbXhvY2lxIG9mdC4uLiBtZnogbmF6eiBlbDogcmh6cwoK

Probably the most baseline egg (5)

How is the Orange Egg encoded?


Again we use CyberChef, and can see it is Base64 encoded fairly quickly.


https://gchq.github.io/CyberChef/#recipe=From_Base64('A-Za-z0-9%2B/%3D',true)&input=V1c5MUlHaGhkbVVnWm05MWJtUWdkR2hsSUU5U1FVNUhSU0JsWjJjdUxpNGdkR2hsSUc1bGVIUWdjR2xsWTJVZ2IyWWdkR2hsSUhCMWVucHNaU0JwY3lBb2EyVjVJRDBnYldGbmJtVjBLVG9LYTI5aElIVmxiM0VnWm5Wb2NuY2dabWhySUdWcGR5QnhaMjB1TGk0Z1oyeDRJSHBsWkdjZ2RHSnhZMnNnWW1vZ2JYUmxJSFpvWkhONFpTQnZaam9LWW1WNWRHOXRhMkVoSUc1c2JDQm9jSGw1ZHlCdFpub2diWGh2WTJseElHOW1kQzR1TGlCdFpub2dibUY2ZWlCbGJEb2djbWg2Y3dvSw

You have found the ORANGE egg... the next piece of the puzzle is (key = magnet):

koa ueoq fuhrw fhk eiw qgm... glx zedg tbqck bj mte vhdsxe of:

beytomka! nll hpyyw mfz mxociq oft... mfz nazz el: rhzs

Opposites Attract (5)

What was the key used to unlock this cipher?


From the last question, we can see that the key was given to us, magnet.


Hey coach, I'm going to need a SUB (5)

What is the final message of the completed egg hunt?

Since we know previous questions used ciphers, the hint is to use SUB (substitute). We can also see prior questions had a similar naming convention for the message, so I assumed “vtt” = “egg”. Putting this in quipqiup.com we get:



The first and best result shows the flag was bean.


No comments: