[JoseMar]

What is and how to use Binwalk?
Earn 500Bytes if you complete the job!

Binwalk is a forensic analysis tool used to analyze, scan, and extract hidden files from binary data, such as images (What we do today), firmware, and executable files. It can be used by ethical hackers and cybersecurity professionals to:

• Detect hidden data (like embedded all files, compressed archives, or steganography).
  
• Extract hidden files automatically from all images, firmware, or any binary file.
  
• Reverse engineer firmware to analyze vulnerabilities.
  

Binwalk is a very powerful tool for ethical hacking and also for digital forensics, allowing researchers to uncover hidden data inside files and analyze security risks.

Example how to use Binwalk:

Today, I am going to decrypt the hidden content of an image found in the Windows Server lab at the following address:

PHP Code


<?php 
http://192.168.1.139:8585/wordpress/wp-content/uploads/2016/09/graciosillo.png 


We right-click and save the image to the Desktop.

Next, we open the terminal and use Binwalk to analyze the image to check if there is any hidden data inside.


As observed, there is a hidden .txt file named detuamigojohn.txt

To extract the hidden content, we use the following command:

Code

binwalk -e graciosillo.png

Now, a new folder has been created on the Desktop with the extracted content:

_graciosillo.png.extracted


Inside, we find the file detuamigojohn.txt, which contains the following message:





Additionally, there is a 4DE94.zip file inside, which contains another file with the same content:


emEgb2RxcWUgY2dxIHF4IG1weXV6dWVmZG1wYWQgcWVmbSBhbmVxdWV1YXptcGEgb2F6IHhhZSB5Z2RvdXF4bXNhZT8K


Let's make this more fun!

I solved this Windows Server lab three years ago for an exercise. The text decoding from the image is a message I had to send to the professor to get a passing note. I find it interesting to do something similar, but offering Bytes.

I'm tagging Bastille to confirm if I can do this. If not, please let me know, and I'll delete it immediately.

Now, if you've read this, I’m sure you're up for the challenge! 🕵️

1. The first person who complete this will receive 500 Bytes from me!
   
2. Your task: Decode the hidden text from the image and tell us how you decode it
   
   Code

   emEgb2RxcWUgY2dxIHF4IG1weXV6dWVmZG1wYWQgcWVmbSBhbmVxdWV1YXptcGEgb2F6IHhhZSB5Z2RvdXF4bXNhZT8K
3. The text is in Spanish, just copy and paste it here to claim your reward!
   

Good luck!

[Footer]

Code

za odqqe cgq qx mpyuzuefdmpad qefm anequeuazmpa oaz xae ygdouqxmsae?

🤣

[wz34a]

Decoded Text (Spanish): ¿Qué tal si me envías el número de seguimiento?

English Translation: How about you send me the tracking number?

[Footer]

@wz34a great congrats!

[Money-]

Do some web challenge. Do some SQLI live site or XSS challenges.

[Bastille]

I didn't know this tool, thanks for the HQ tutorial and the share, as always.

You can add rewards / challenges in your threads if you want, no need to be in the Member Contest or Giveaway sections if this case, sorry for the late reply !