Irked_steganography

---

.backup

---

ircd@irked:/home/djmardov/Documents$ ll
total 12K
4.0K drwxr-xr-x  2 djmardov djmardov 4.0K Sep  5 08:41 .
4.0K drwxr-xr-x 18 djmardov djmardov 4.0K Sep  5 08:41 ..
   0 lrwxrwxrwx  1 root     root       23 Sep  5 08:16 user.txt -> /home/djmardov/user.txt
4.0K -rw-r--r--  1 djmardov djmardov   52 May 16  2018 .backup

After performing some basic enumeration, I came across an interesting file at the home directory of the djmardov user. The file is .backup

ircd@irked:/home/djmardov/Documents$ cat .backup
Super elite steg backup pw
UPupDOWNdownLRlrBAbaSSss

It claims to be a “steg” password Is “steg” the “steg” as in steganography?

ircd@irked:/home/djmardov/Documents$ su djmardov
Password: UPupDOWNdownLRlrBAbaSSss
 
su: Authentication failure

Attempting to change to the djmardov user with the password above fails. So I would assume that this is indeed a “steg” password

steganography

---

The only media I could think of if someone were to hide credentials in the whole system is the image found on the web root earlier

This angry face

i used this steganographic decode online

This is the output kab6h+m+bbp2j:HG