Ostrich Lab - CTF Write Ups

abandoned place - ctflearn.com

2025-05-29

Author: Aaron 'theHastyOne' Hasty

abandoned place on CTFlearn

Download the file.

steghide on the file will produce this error Corrupt JPEG data: 220696 extraneous bytes before marker 0xd9 steghide: could not extract any data with that passphrase!

Open the file in a hex editor, locate the Start of File (SOF) marker. FF C0

the structure is

FF C0 [Length] [Precision] [Height (2 bytes)] [Width (2 bytes)] [Components]

edit the height bit to be much longer. In this example I went to 1400 05 78

alt text

save the edits and open the image.

alt text

ctflearn{urban_exploration}