Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
Analyze the fragments and `.meta` sidecars under `fragments/` to reconstruct a fragmented JPEG. Determine the order from the SHA-256 hash chain rather than filenames, then recover the flag from the reconstructed JPEG COM comment.
The fragment filenames' numbers do not reflect order; chain them by each .meta's seq/sha256/prev_sha256
The real chain starts at prev_sha256=ROOT and completes at total fragments (a 1-fragment decoy chain and a .meta-less junk fragment exist)
Concatenate in order to rebuild a valid JPEG and read the flag from its COM segment