🧩 Newbie puzzles ! 🧩 Solve one and get the MERIT you deserve 🏆

[Rizzrack]

Okay the only one I could think of that had a dataset available was the Million Song Dataset, and I tried encoding all of the song title names to SHA-1 via some sqlite3 queries and python, and output that out to a csv file. But I couldn't find the hash that I had found in the previous step. My guess is that the database is some different one altogether, I guess I'll give it a few more tries later.

Do not complicate the trivial !
Search engines are your friend  

P.S. probably did not find it due to uppercase letters or stuff like that. wrote the name of the song by hand and all lowercase

[PhoenixZephyrus]

Okay the only one I could think of that had a dataset available was the Million Song Dataset, and I tried encoding all of the song title names to SHA-1 via some sqlite3 queries and python, and output that out to a csv file. But I couldn't find the hash that I had found in the previous step. My guess is that the database is some different one altogether, I guess I'll give it a few more tries later.

Do not complicate the trivial !
Search engines are your friend 

P.S. probably did not find it due to uppercase letters or stuff like that. wrote the name of the song by hand and all lowercase

Ah its all lowercase. Then I would say the song is "Who Let The Dogs Out" by "Baha Men"

Method: Well I had already got the SHA-1 hash from the previous posts. Then I used the track_metadata from FMA Data for music analysis.

Then I wrote a short python code to get the SHA-1 hash name for each of the files and appended that with the track names. I wrote a pythonic script (instead of trying to find an online music search db) just because I wanted to check out some of its functions and also get familiar with some Capture The Flag contest method - this challenge was quite like some preliminary CTF contest
Here is the code:

Code:

import csv
import hashlib
import os.path

BASE_DIR = os.path.dirname(os.path.abspath(__file__))
db_path = os.path.join(BASE_DIR, "songs.db")
file = open("C:\\hashes_tracks.csv", "w", encoding="utf-8")
with open("C:\\tracks.csv", "r", encoding="utf-8") as dataset:
    reader = csv.DictReader(dataset)
    for row in reader:
        name = row["title"].lower().strip()
        result = hashlib.sha1(name.encode())
        file.write(result.hexdigest() + name + '\n')

And then a simple search for the hash was enough to get the song name.
Proof that the hash matches

[Rizzrack]

Ah its all lowercase. Then I would say the song is "Who Let The Dogs Out" by "Baha Men"

Method: Well I had already got the SHA-1 hash from the previous posts. Then I used the track_metadata from FMA Data for music analysis.

Then I wrote a short python code to get the SHA-1 hash name for each of the files and appended that with the track names. I wrote a pythonic script (instead of trying to find an online music search db) just because I wanted to check out some of its functions and also get familiar with some Capture The Flag contest method - this challenge was quite like some preliminary CTF contest

And then a simple search for the hash was enough to get the song name.

You went the whole nine yards !
I assumed at some point someone would get to the SHA1 hash and try some websites with different databases like this one: https://hashes.com/en/decrypt/hash

But because you did it all on your own and also shared the repositories and code used ... 1 merit did not feel enough.

You may not be a newbie anymore but heck, it's my thread and I'll merit if I want to

P.S.
Morale of the story: do not use generic passwords because even if they are hashed we can still find the hash online and whip up a small piece of code that finds it in a minute or two !

[Kwsikh]

But from what I know, SHA-1 is a one way hash right? It isnt possible to decrypt it without maybe brute forcing? Because thats what the hash is meant to be - irreversible?
-snip-
Unless I'm missing something here...

Yes, you're correct, there's no way to reverse it aside from bruteforce.

But there's only about 600million song titles out there,
just make a database of all the songs titles, create a simple code to perform SHA1 to each of the titles (and probably variations of them) and a typical computer can bruteforce it within a few minutes/hours.
Then you can get 1 merit 

All things going out of my head if it was known by me then may be i also might be a Hero member!!

[BitcoinIsABubble]

Okay the only one I could think of that had a dataset available was the Million Song Dataset, and I tried encoding all of the song title names to SHA-1 via some sqlite3 queries and python, and output that out to a csv file. But I couldn't find the hash that I had found in the previous step. My guess is that the database is some different one altogether, I guess I'll give it a few more tries later.

Do not complicate the trivial !
Search engines are your friend 

P.S. probably did not find it due to uppercase letters or stuff like that. wrote the name of the song by hand and all lowercase

Ah its all lowercase. Then I would say the song is "Who Let The Dogs Out" by "Baha Men"

Method: Well I had already got the SHA-1 hash from the previous posts. Then I used the track_metadata from FMA Data for music analysis.

Then I wrote a short python code to get the SHA-1 hash name for each of the files and appended that with the track names. I wrote a pythonic script (instead of trying to find an online music search db) just because I wanted to check out some of its functions and also get familiar with some Capture The Flag contest method - this challenge was quite like some preliminary CTF contest
Here is the code:

Code:

import csv
import hashlib
import os.path

BASE_DIR = os.path.dirname(os.path.abspath(__file__))
db_path = os.path.join(BASE_DIR, "songs.db")
file = open("C:\\hashes_tracks.csv", "w", encoding="utf-8")
with open("C:\\tracks.csv", "r", encoding="utf-8") as dataset:
    reader = csv.DictReader(dataset)
    for row in reader:
        name = row["title"].lower().strip()
        result = hashlib.sha1(name.encode())
        file.write(result.hexdigest() + name + '\n')

And then a simple search for the hash was enough to get the song name.
Proof that the hash matches

Oh wow, good job there!

[Rizzrack]

Upload the below image to imgur or a similar service and post it here:

NB2HI4DTHIXS65DFPB2GE2LOFZXGK5BPOFRWI2DPMF2GMZDQ

[Rizzrack]

I'm starting to think you guys do not want/need merit !
Hint #1: it's not base58 or base64

Hint #2: if you would decode "NB2HI4DTHIXS65DFPB2GE2LOFZXGK5BPOFRWI2DPMF2GMZDQ" from base32 to text the output would be

https://textbin.net/qcdhoatfdp

Extra hint: 2 more steps and you can find the image !

[Rizzrack]

Upload the below image to imgur or a similar service and post it here:

NB2HI4DTHIXS65DFPB2GE2LOFZXGK5BPOFRWI2DPMF2GMZDQ

Decided to post the response since there were no takers this round !

How to solve:

Step 1: decode from base32 to text

Code:

NB2HI4DTHIXS65DFPB2GE2LOFZXGK5BPOFRWI2DPMF2GMZDQ

and you would get

Code:

https://textbin.net/qcdhoatfdp

Step 2: The code from the pastebin is too big to fit in the post so if you are curious check the link yourselves.
Symbols are HTML URL-encoded. So you would need to decode them first. "%3A" would be ":", "%2F" would be "/" etc.

Step 3: Decode from base64 to image. For example I used https://codebeautify.org/base64-to-image-converter



And it shows you the image !
Uploading it to imgur and posting it here should not require any further explanations  

[BitcoinIsABubble]

This was a tough one for me I admit, do you plan to release further challenges anytime soon?

[Rizzrack]

This was a tough one for me I admit, do you plan to release further challenges anytime soon?

To be honest I was a little bummed that there was no interest in the last one and kind of let it go for the moment...
Either way there are so many ways you can encode stuff and running dry on ideas. Will think about it and see if I can come up with a few more  

Anyone else is invited to chip in with a suggestion or an interesting question !

P.S. You also solved 2 of them so I might incline to add an extra rule about how many times you would be allowed to participate. Well done though 

[nc50lc]

-snip-
Anyone else is invited to chip in with a suggestion or an interesting question !

How about if N-days have passed and the puzzle isn't solved yet, open that round for all ranks instead of just newbies?
You can decide on the number of days.

[m2017]

-snip-
Anyone else is invited to chip in with a suggestion or an interesting question !

How about if N-days have passed and the puzzle isn't solved yet, open that round for all ranks instead of just newbies?
You can decide on the number of days.

I think this is a good intention and Rizzrack will support your proposal.

I like the idea of a thread like this, allowing beginners to learn something new about crypto. And as a bonus, get merit, which will also encourage them to be active. But most importantly, this interactive format allows to involve beginners in bitcoin world and allows to practically contact with it. It also has informational benefits for everyone who follows similar activities and reads the topic. Something similar is implemented in topic [Merit] Hey Newbies! Can You Sign A Message? I hope there will be more such forms of active involvement of newcomers in the future.

[nakamura12]

It would be good of the title is not newbie puzzles instead it should be Newbie friendly Puzzles. Though you may say that it is a newbie puzzles but what about those who doesn't have knowledge on what to do like binary codes for example. You can make this challenge the same as Pmalek's Word Game where newbies are given an advantage where they are the one who can participate first until the time runs out and then higher ranks can participate too if lower ranks can't find the answer or solution. Nice puzzles by the way.

[Bamjos]

Question 3 (more of a challenge actually than a question) :

-----BEGIN BITCOIN SIGNED MESSAGE-----
Tjho uijt nfttbhf: "Xf bsf bmm tbuptij fydfqu gps DTX" vtjoh uif tbnf beesftt J bn (1K7neh5scRzVIFOZey39XWXL7gtMqFpYAz)
-----BEGIN BITCOIN SIGNATURE-----
1J7mdg5rbQyUHENYdx39WVWK7fsLpEoXZy
IDt1vr8Ahx4Yt3Rm5zfvwbGIis7MrpSDNx8ev6inxMr+NB8CWOHoTPVeujlfYMpsW58Txp1scaxXY5WtNQhbS94=
-----END BITCOIN SIGNATURE-----

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
Tjho uijt nfttbhf: "Xf bsf bmm tbuptij fydfqu gps DTX" vtjoh uif tbnf beesftt J bn (1K7neh5scRzVIFOZey39XWXL7gtMqFpYAz)
-----BEGIN BITCOIN SIGNATURE-----
Version: Bitcoin-qt (1.0)
Address: 3K1AAUvgrYNH6Syp5e1zjqAWpe3dapBUPS

IFTQanseMw7GHwJKUzka0CxEV5XaHy2xcm+CflZrxzmlVwaeamI++5SqHPTYXZCvN04J7BW7Sou7cdp+qj0eXFc=
-----END BITCOIN SIGNATURE-----

[Rizzrack]

How about if N-days have passed and the puzzle isn't solved yet, open that round for all ranks instead of just newbies?
You can decide on the number of days.

Not a bad idea !

Once I come up with a new one will try this out. Thanks 

Code:

-----BEGIN BITCOIN SIGNED MESSAGE-----
Tjho uijt nfttbhf: "Xf bsf bmm tbuptij fydfqu gps DTX" vtjoh uif tbnf beesftt J bn (1K7neh5scRzVIFOZey39XWXL7gtMqFpYAz)
-----BEGIN BITCOIN SIGNATURE-----
Version: Bitcoin-qt (1.0)
Address: 3K1AAUvgrYNH6Syp5e1zjqAWpe3dapBUPS

IFTQanseMw7GHwJKUzka0CxEV5XaHy2xcm+CflZrxzmlVwaeamI++5SqHPTYXZCvN04J7BW7Sou7cdp+qj0eXFc=
-----END BITCOIN SIGNATURE-----

If you would have read the post you would have seen that it was already solved:

Tjho uijt nfttbhf: "Xf bsf bmm tbuptij fydfqu gps DTX" vtjoh uif tbnf beesftt J bn (1K7neh5scRzVIFOZey39XWXL7gtMqFpYAz) when you change every letter to the previous one in the alphabet becomes Sign this message: "We are all satoshi except for CSW" using the same address I am (1J7mdg5rbQyUHENYdx39WVWK7fsLpEoXZy)

You were supposed to sign it with the above address, not a random one you own.
Please read and think a bit before replying next time 

[Rizzrack]

Here's a brain teaser for y'all !


for (i = 3):
     type(X) == string
     print(X) =

[Rizzrack]

BUMP !

*Take it one step at a time. What do you think the above equation is ?

[Majestic-milf]

Answer(Q1)
 The quick brown fox jumps over 13 lazy dogs.

[DdmrDdmr]

Not sure about one thing here, and without giving it away (others should scoop the Merit reward), I can’t make out why the "-1" is there nor whether it is meant to be included in the summation or rather subtracted after it (the latter I believe, since it lacks brackets). I wouldn’t have thought it (the "-1") to be part of the original formula, but I may be wrong.

Note: If anyone wants to perform the calculus, you can easily do it on Excel (start with i=3 for a reason).

<...> It's about the meaning of subtracting 1 from the equation where i=3, not the calculation. And finding a "string" ...

I know, that's why I said "wants to" as opposed to saying it in a "needs to" context.

[Rizzrack]

Answer(Q1)
 The quick brown fox jumps over 13 lazy dogs.

Reddit did not help on this occasion. It was already solved and still gave a wrong answer. Damn...  

Not sure about one thing here, and without giving it away (others should scoop the Merit reward), I can’t make out why the "-1" is there nor whether it is meant to be included in the summation or rather subtracted after it (the latter I believe, since it lacks brackets).

Subtracted after the SUM  

I wouldn’t have thought it (the "-1") to be part of the original formula, but I may be wrong.

Note: If anyone wants to perform the calculus, you can easily do it on Excel (start with i=3 for a reason).

It's about the meaning of subtracting 1 from the equation where i=3, not the calculation. And finding a "string" ...