Rating:

Players download a PCAP. There's a lot of noise from random HTTPS traffic, so they should filter by SMB and see this WAV file transfer.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/0.PNG)

Return to the start of the request, then follow the TCP stream.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/1.PNG)

You can convert the ASCII to raw and save this as a .MP4 file.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/2.PNG)

Alternatively, just go to `File > Export Objects > SMB`.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/3.PNG)

You'll find an AI song I generated with [suno](https://suno.com).

If you closed the PCAP here though, you missed a step! If you look through the ports (I recommend filtering out HTTP(S) with `!(tcp.port == 80 || tcp.port == 443)`), you'll a suspicious one; `1337`.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/4.PNG)

```
I need to send you a message but I can't remember what frequency you said?
It was 18-21kHz.
Sending the song via SMB now.
Oh, how interesting.. Thanks!
```

So, there's something hidden in some frequency of the audio ? We can isolate these things with `sonic-visualizer` or `Audacity`. I went with the latter.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/5.PNG)

Viewing the spectrogram doesn't reveal anything.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/6.PNG)

We need to configure the range between `18000hz` to `21000hz`.

![Image](https://github.com/Crypto-Cat/CTF/raw/main/ctf_events/2024/intigriti_24/forensics/ctf_mind_tricks/images/7.PNG)

Flag: `INTIGRITI{hidden_in_music_1337}`

Original writeup (https://crypto-cat.gitbook.io/ctf-writeups/2024/intigriti/forensics/ctf_mind_tricks).