I found a game: http://ecyfgfxadtjhyuft.onion/
Help me find out more about it.
You can find three links in html or by clicking on words hidden cipher and dark.
/h3ll.0/
/w.rabb1t/
/c1rcu$/
http://ecyfgfxadtjhyuft.onion/w.rabb1t/
Doesnt work:
http://ecyfgfxadtjhyuft.onion/c1rcu$/
plays creepy music
/audio/c1rcu$.mp3
title of page is <title>3182</title>
If you listen carefully you can hear some digital sounds in the first half of the song.
It sounds like some amateur radio digital mode
http://www.sigidwiki.com/wiki/Category:Amateur_Radio
I cant see it clearly in spectogram.
mp3:https://clyp.it/vsmtegwu
and closeup of binary data
with some help from the IRC HAM nerds I got this:
am I hearing DTMF on the right channel?
Sounds like someone pressing keys on a phone
and morse code on the left channel
the morse code on the left channel reads: PAPERS
the DTMF on the right channel reads: 15838148381283
some phoneword maybe
http://ecyfgfxadtjhyuft.onion//h3ll.0/
This one also has mp3 that dictates numbers in spanish.
And in html it contains 2 interesting entries:
<meta name="hell0" content="73:74:65:67:68:69:64:65">
<title>⚵⚳⚘⚴</title>
73 74 65 67 68 69 64 65 is steghide in HEX
here is link to chaos.mp3
https://clyp.it/isdt0ce2
And first few lines of mp3 with ID3 tags:
ID3 @ A p[TCON SpeechTALB Created: 4/29/2016 12:57:06 AMTIT2
12478649.mp3TXXX Encoded by Lame MP3TXXX Language(s) Spanish [Modern]TYER 2016TDRC 2016COMM http://www.nextup.comCOMM XXX http://www.nextup.comTPE1 / TextAloud: IVONA Conchita22 (Spanish [Modern])˙ó€D Xing ›e
"$'*,.1368;=?BEHJMORUWY[^acfhjmpsux{}„†‰‹Ž“–›žˇŁ¦©Ş°łµ¸»˝ŔĂĹČËÍĐÓÖŘÚÝŕăĺčëíđňô÷úüţ PLAME3.99r
Guy from IRC here: Steghide was a big clue. Steghide is a steganography program used to hide data within images and audio files. http://ecyfgfxadtjhyuft.onion/audio/chaos.mp3 This here has data hidden within it, but it cannot be extracted without a passphrase. Since I do not have a secure VM environment and not enough self-confidence to do this myself, I'll leave it to someone else to find the passphrase (probably numeric, from the upshifted spanish numbers, or maybe it is PAPERS/the DTMF tones?). Who knows what it could contain.
Cheers though and good luck.
>>17795494
here are first few lines of c1rcu$.mp3
ID3 @ Z \yTCON PoliticsTALB PoligraphiaTRCK
Tabula RectaTIT2 TargetTXXX $ Unknown text information frame 2016TYER 2016TDRC 2016COMM BRCOMM XXX BRTPE1 3182˙ű”D Xing &
"%'*,/147:<?BDFILOQTWZ\_adfiloqtwz|„†‰ŚŽ“•šťŁĄ¨¬®°˛¶¸ş˝ŔĂÄČĘÍĎŇÔ×ŮÜŢáăćéěîńô÷ůűţ PLAME3.99rą 5
>>17795494
IVONA Conchita22 references a radio broadcast that has the numbers 9719035. Probably the source file.
Someone should download steghide and run it through CMD with the command steghide extract -sf (filename here). Then put in whatever passphrase should exist for it.
>>17795516
want to try this but too scared
someone else?
>>17795571
I would, but I'm not on a compromisable machine right now.
I tried papers and 15838148381283 and both together as steghide password but they doesnt work.
Steghide doesnt work on mp3s only wavs and jpgs.
I didnt transcribe Spanish numbers yet though, its too fast form me. Maybe they are password.
Someone help me.
https://clyp.it/isdt0ce2 or
http://ecyfgfxadtjhyuft.onion/audio/chaos.mp3
>>17795807
Steghide works fine on mp3s.
>>17795814
3234424415113443353431244424133443133442424535443443
Bump for interest
"So if anyone tells you, 'There he is, out in the wilderness,'
do not go out;
or, 'Here he is, in the inner rooms,'
do not believe it.
>>17795814
https://clyp.it/lmii3to5
chaos.mp3 pitch shifted down and slowed by 5%, it's the 52 character long sequence of 3234424415113443353431244424133443133442424535443443. I also noticed a recurring pattern of numbers '3443' in that sequence. I'm comparing that to some things right now.
http://fh63ozjoouyh7iuu.onion/
>.onion
nice try
>>17795362
so I googled the picture on this one ecyfgfxadtjhyuft.onion and am pretty sure it's this guys doing. I don't speak Spanish but google translate helps a lil http://liberatetutemetexinferis.blogspot.de/
fh63ozjoouyh7iuu.onion/ has the same 'poem' but
fh63ozjoouyh7iuu.onion/c.h3ss/
fh63ozjoouyh7iuu.onion/abyss/
are new
If someone wants to look into it.
And /w.rabb1t/ works on fh63ozjoouyh7iuu.onion
fh63ozjoouyh7iuu.onion/3916818/
Can anyone check if this link works?
Yeah, it does.
Nothing worthwhile there
bump for interest
>>17796621
XCJB YLBF XHZY VVJM
YBFX GEBT HPPQ KVHB
XFQR RLNA HXUR RZFG
In the stag image there is a message hidden (it repeats itself)
The message is:
we shall DIVe Down thROugh blACKABYsSes AND iN THAT laIr oF ThE dEePoNES We ShaLl dwELL aMIDST woNDer And gLORY foreVer
>>17796089
I am on windows using steghide (0.5.1) Windows package and when trying to
steghide extract -sf c1rcus.mp3
i get
steghide: the file format of the file "c1rcus.mp3" is not supported.
>>17796775
I found that this is from "The Shadow Over Innsmouth" by HP Lovecraft. The full quote is:
"The Deep Ones could never be destroyed, even though the palaeogean magic of the forgotten Old Ones might sometimes check them. For the present they would rest; but some day, if they remembered, they would rise again for the tribute Great Cthulhu craved...
We shall swim out to that brooding reef in the sea and dive down through black abysses to Cyclopean and many-columned Y'ha-nthlei, and in that lair of the Deep Ones we shall dwell amidst wonder and glory for ever."
I don't know how this fits with everything else.
>>17796810
Don't know what to tell you. Able to do it fine on my end.
