Root-me.org

We need to go deeper

Russian dolls

We got another image. The title is a obvious hint about this type of challenge. The russian dolls are dolls that fit in each other.

The binwalk command allows us to check for file inside of files.

 binwalk ch10.jpg

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             JPEG image data, JFIF standard 1.01
30            0x1E            TIFF image data, big-endian, offset of first image directory: 8
202           0xCA            JPEG image data, JFIF standard 1.01
232           0xE8            TIFF image data, big-endian, offset of first image directory: 8
404           0x194           JPEG image data, JFIF standard 1.01

There’s a few different image found inside the first jpg. We’ll extrack them.

binwalk --dd='.*' ch10.jpg

The file called 194 is another picture that contains the password we’re looking for.