> For the complete documentation index, see [llms.txt](https://samfisher91.gitbook.io/samfisher-blog/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://samfisher91.gitbook.io/samfisher-blog/wave-flagyard.md).

# Wave - FlagYard

Downloading the challenge file then unzip it we get wave1.pcpang file ,run it with wireshark

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2FShKEdtCcATah19IFVs6D%2Fimage.png?alt=media&amp;token=49abff37-a61a-4cbf-b763-93b56f79f03f" alt=""><figcaption></figcaption></figure>

in tcp stream number 16 + 18 + 19 there is encoded base64 ,we collect the three of them <br>

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2F1B3iJ2sFOg9Qcd7fRG80%2Fimage.png?alt=media&amp;token=ef8a8786-fb9c-48d3-b175-9ac32dd34c9e" alt=""><figcaption></figcaption></figure>

Zip file is protected with password&#x20;

now exporting all files into a folder&#x20;

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2FpxKaNrq0MvtoWULvXN6V%2Fimage.png?alt=media&amp;token=f3345060-eb63-4786-afc0-0cb122bfa6b3" alt=""><figcaption></figcaption></figure>

we find those files exported

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2FQlaeCrAMAu5Eu12NR2k5%2Fimage.png?alt=media&amp;token=be1237d9-7bcc-4fbd-90b0-6d8d976ec16c" alt=""><figcaption></figcaption></figure>

using this website to check for stego hidden in those pictures

{% embed url="<https://www.aperisolve.com/>" %}

drop the superman picture "image.png" then submit

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2FVRPGpuDfHzbG6vnRAspV%2Fimage.png?alt=media&amp;token=9236bb27-4e8e-40ab-bc3a-a7bc1fec8275" alt=""><figcaption></figcaption></figure>

u will find a QR code in this picture ,scan it to get the password

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2FLqG4ETkkaggWq96Xk7BW%2Fimage.png?alt=media&amp;token=c13ebd08-27b4-4235-90c1-8dd12958c72a" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2459792242-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F4TFAEQ86UXTLdhGzyRhz%2Fuploads%2F7G8TLhXSoOA05uboWgoy%2Fimage.png?alt=media&amp;token=37431b2b-6ae0-43f3-aad9-182dba5b263a" alt=""><figcaption></figcaption></figure>

unzip the zip file using this password ,and you will .wave audio file contain morse code ,using this website to decode the code

{% embed url="<https://morsecode.world/international/decoder/audio-decoder-adaptive.html>" %}

put the extracted audio file to get the flag