EOF{4nd4n_w4_d1nw4v4w}unzip -l WrongNumber.zip
Contents:
Archive: WrongNumber.zip
Length Date Time Name
--------- ---------- ----- ----
246 2025-10-21 18:39 take_it.zip
35995736 2025-10-20 13:42 wrong_number.wav
--------- -------
35995982 2 files
Two files found:
wrong_number.wav - An audio file (~36 MB)take_it.zip - A small encrypted zip file (246 bytes)Upon listening to the song, the number 2441139 was embedded in the lyrics!
This was straightforward - no need for DTMF decoding, spectrograms, or complex audio analysis. The password was simply sung as part of the song lyrics.
unzip take_it.zip
Output:
Archive: take_it.zip
skipping: finally.txt unsupported compression method 99
Understanding Compression Method 99:
Compression method 99 indicates AES encryption in ZIP files. The standard unzip command doesn't support this, so we need to use 7-Zip.
7z x take_it.zip -p2441139
Success! The zip extracted a file called finally.txt.
cat finally.txt
Output:
YIZ{4hd4h_x4_d1hx4v4x}
This doesn't match the expected EOF{...} format, indicating it's encrypted with a substitution cipher.
Looking at the pattern:
YIZ{...} should be EOF{...}Y → E, I → O, Z → FCalculating the Shift:
Y (position 25) → E (position 5) = shift of -20 (or +6)
Decoding with ROT-20:
Input: YIZ{4hd4h_x4_d1hx4v4x}
Output: EOF{4nd4n_w4_d1nw4v4w}
Flag: EOF{4nd4n_w4_d1nw4v4w}
unzip - Archive inspection7z - AES-encrypted ZIP extraction| Step | Action | Result |
|---|---|---|
| 1 | Extracted WrongNumber.zip |
Found wrong_number.wav and take_it.zip |
| 2 | Listened to audio for password | Got password: 2441139 |
| 3 | Extracted AES-encrypted zip with 7-Zip | Obtained finally.txt |
| 4 | Decrypted ROT-20 cipher | Retrieved final flag |