> For the complete documentation index, see [llms.txt](https://ravins-organization.gitbook.io/ctf-writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ravins-organization.gitbook.io/ctf-writeups/2024/gryphons-ctf-2024/misc/gryphonsos.md).

# GryphonsOS

Welcome to GryphonsOS!

We are given a ppsm file which means that there is a macro running and it will auto run. However if we open the file in powerpoint, we can see a whole bunch of clues that will lead us to the flag.

Firstly, we can find out whats the order of the flag. This might not make much sense now, but it will make more sense as we go through it.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FTNErQPof8qzKYcGEPILE%2Fimage.png?alt=media&amp;token=ed987629-a41c-43d1-855c-77570fc1f5b8" alt=""><figcaption></figcaption></figure>

The first part, the audio file, spooky.wav.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2F0QmXEnTqha5hrrXnclpP%2Fimage.png?alt=media&amp;token=35dea02c-2c2b-45d3-8601-b2f2c70a6019" alt=""><figcaption></figcaption></figure>

Lets take a look at it and see if we can find any clues. By opening it in audacity, we can see the spectogram shows the following

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FD1VXEHg5D1kKeIdcRidf%2Fimage.png?alt=media&amp;token=6007f169-85a7-49ce-b868-192e7ab9f52b" alt=""><figcaption></figcaption></figure>

This is in braille, for reference

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2Fqye8F5Gzj6lWvnlXMrlZ%2Fimage.png?alt=media&amp;token=de1d9135-5c63-4918-a8e2-4c3120a4303b" alt=""><figcaption></figcaption></figure>

Thus the first part decodes to SPECTRAL

Now, onto the second part. We are given code.py, and the value of output.txt being "ㄝㄞㄜㄨㄝㄞ"

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2Fi20RVaWXs3VXHVfaFco0%2Fimage.png?alt=media&amp;token=daaccc90-d3a3-40b5-912c-a11abede169c" alt=""><figcaption></figcaption></figure>

By reversing this code, we can obtain back the missing word.

```python
encoded_text = "ㄝㄞㄜㄨㄝㄞ"
decoded_text = ""
for i in encoded_text:
    decoded_text += chr(ord(i) - 12505)
print(decoded_text)

#Output is DECODE

```

Thus, we get the 2nd part, DECODE

Onto part 3 now, the maze. By writing out what each of the symbols represent after decoding them using the navy flags translator (<https://www.dcode.fr/maritime-signals-code>), and then tracing out the path of the maze, we can trace the answer to be S-I-G-N-A-L

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2Foj1riYgzzzWFmzZ2Jwxu%2Fimage.png?alt=media&amp;token=46fb205b-9416-4872-972e-8f6dcc43366a" alt=""><figcaption></figcaption></figure>

Thus part 3 is SIGNAL

Onto part 4, where it seems to be a completely black image. However there is something hidden in it for sure.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FukbZwH7lUnBbWC0oZKKE%2FPicture1.png?alt=media&amp;token=f2e3335d-f3a1-4b32-ac0b-f9d2dd50e5cf" alt=""><figcaption></figcaption></figure>

By increasing the exposure, we can see the hidden message in it.

<figure><img src="https://175444261-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyxEI13wXOyST4LLTOUiS%2Fuploads%2FbyUSJH1bxQuGPclNF2ZP%2Fimage.png?alt=media&amp;token=34924356-19c2-49a2-be8a-dc7feab42136" alt=""><figcaption></figcaption></figure>

Thus giving us part 4, HIDDEN

making the flag, `GCTF24{SPECTRALDECODESIGNALHIDDEN}`
