 What's going on everybody? My name is John Hammond. Welcome back from the YouTube video with the Boot to Root CTF 2019. This is the second challenge in the cryptography category. It's called Scatter Me. I hate doing that intro. I have to do it every time. I don't have to, but I like to. I don't because I said I hate it. All right. This is Scatter. It's a Google Drive file again, which we can just download. It's taking a little bit of time. So I'll open it and then we'll just copy the information out of it and throw it in Sublime Text or whatever. The prompt here that I want to I want to bring your attention to says, can you retrieve the passcode from this file and the submit flag is actually boot to root and then the passcode in the curly braces. So that is important to note. So let's go ahead and run through it. I've got a file here. Let's just call it scatter.txt. Paste it all in and if we actually look at this, it looks like nonsense, right? We've got colons and semicolons and numbers and it looks like the max value it goes to is about 75. I see a lot of 25s, but and then occasional jumps to 75, although there doesn't seem to be anything in between. It looks like the pattern is number, number, number. So separated by the colons and then a semicolon. That's a float, right? You can kind of can still consider that 1.25 a number, number, number, colon. Okay, so it looks like they're in a sets of three. Yeah, because each colon is a three, each semicolon is a three and a colon is a separator. So I started this for a long time and I started to think about, well, looks like there's a range of numbers, but it's not like any base because there's nothing in between. This isn't ASCII. And I was like, man, what, what is this? But I know there are three pairs or sets of three and that's weird. And I know the challenge is called challenges called scatter. So I had this epiphany. Oh, that's got to be a scatter plot, right? Maybe I've seen that in the CTF before, maybe it's a 3D scatter plot because there are three coordinates. So what I actually did is I opened up scatter.tex. And actually, I'll show you this later, because first, we need to find something that would allow us to go ahead and actually work with the scatter plot display it. So I tried to Google, let's go to Google.com, let's make it official scatter plot, 3D online or something like that. I think I ended up finding plotly. And that was the one that worked for me. Scatter plot. Did I type 2D? Who do you scatter plot? Plotly. That one, plotly. I don't know why F11 isn't working. I want to get back to my scatter plot online. And I probably did like 3D scatter plot online. This this took a little bit of itself, right? Online graph Baker, poly chart, this thing. So it allowed me to create a scatter plot from this. This is a 2D one 3D scatter plot. Okay. 3D scatter plot type of scatter plot that shows relationship. This looks right. And so I went to edit chart. And I think I needed to like create an account. I think I actually did. No, no. Oh, sweet. No, yeah, I need to create an account which is stupid and annoying. So let's just create something garbage. Roll student company organization email so a at a.com. Anything, anything, fingers cross it lets me log in fingers cross that actually habits are sweet it doesn't. All right, cool. Yes, so let's make a copy of it. And now we can work with that. Great. So we can edit stuff. So there are a lot, there's a lot here, right? And you could go through it and enter it all one at a time manually. But that's stupid. And I know a lot of people I think went through it and did it. And they groan at me when I kind of gave them a pointer that like don't do that. That's stupid. So what you can do is actually convert your scatter dot text data and say that every colon is actually a new line. So now we've got them all in separate lines and every, sorry, every semicolon is a new line. And now every colon is a tab. So that means I'm moving over to the next next column. So now we've got all the values and we can copy that. And if we paste it in, let me paste it in please. Okay, website, make me look pretty bad. Why am I not allowed to edit this anymore? Oh, no, I am. There it is. Okay. So that's not Oh, that is just about right. I thought I was right. When I had worked with this originally, I hadn't actually removed everything from that demo. So let's go ahead and keep that in there. If I refresh the page, I'm gonna go back to the demo. Maybe it'll keep it all in here. If I just paste this now. Oh, geez, make a copy, do the thing. Now I paste it all in. There we go. Because I kept that spiral up there, I was able to see a little bit better. And I started this for a while and I tried to figure out what is that actually trying to say or what is it actually trying to tell me? Let's zoom in, see if make this bigger for you. Cool. So 3000728. And I spend this around I thought it was like blue for a little bit or some weird, weird information. So that I'm assuming is the passcode, right? 3000728. We can go ahead and try it. We can take a look. Move in a scatter me. Boot to root 370028. That's what it is, right? 28 Yep. Submit. No, I'm wrong. 3700728. I'm sorry, I'm an idiot. You guys were probably yelling at your computer screen. Tell me, John, you're an idiot. Alright, we got it. That was that. That's it. Scattered challenge. Interesting, because you wouldn't immediately think, what is that scatter me? You're looking at all this text, like that's some kind of something, but I don't know what it would be. Challenge titles a hint. Challenge prompt is a hint. Anything they give you is there for a reason, usually. Alrighty. Hey, I hope you guys like this video. I hope that was kind of neat. Hope that was kind of cool. Hope you learned something. Hope you put this tool in your back pocket. And if you like this video, please do like comment and subscribe and join the discord server. There is a link in the description. It's an awesome community and I'm grateful for each and every one of you. That's it. That's all I'm going to talk. That's all I'm going to say this time. I'm done. Stop recording.