Hello again.
I was not the first to find the key this time, props to EnigmaZer0 for this one! After seeing that everyone enjoyed understanding how the first clues were solved I thought I'd provide an explanation for The Leporine Key.
The second clue dropped early afternoon EDT on (easter) Sunday April 21 2019. The clue can be viewed on the satoshis treasure website here and looked like this:
_____ _ _ _ _ _____
/ ___| | | | | (_| ) |_ _|
\ `--. __ _| |_ ___ ___| |__ _|/ ___ | |_ __ ___ __ _ ___ _ _ _ __ ___
`--. \/ _` | __/ _ \/ __| '_ \| | / __| | | '__/ _ \/ _` / __| | | | '__/ _ \
/\__/ / (_| | || (_) \__ \ | | | | \__ \ | | | | __/ (_| \__ \ |_| | | | __/
\____/ \__,_|\__\___/|___/_| |_|_| |___/ \_/_| \___|\__,_|___/\__,_|_| \___|
.------------------------------------------------------------------------------------.
| |
| FOLLOW THE CRAZY RABBIT |
| |
| Congratulations to the Hunters who congregated at the locations indicated |
| in my first transmission and found the first keys of the Hunt. A hearty |
| congratulations as well to the few who realized that travel in meatspace |
| was not entirely necessary to find these keys. While parts of the Hunt are |
| solitary endeavours, most of the time you will need to work together as a |
| clan to pull ahead. This next challenge is solvable for an individual only |
| at considerable expense; for a group it is nothing but a simple test of |
| cohesion and trust. |
| |
| In my hunt, as in life, remember that nothing is what it seems. |
| |
| |
'------------------------------------------------------------------------------------'
The second clue contained a link to this gif:
which is a choppy scene containing bugs bunny and a close-up of a human face. In the clue, the link to this gif said "nothing is what it seems". This was the first hint that what we were looking at (a gif) was probably more than just a gif.
The first thing I did was download this gif so I could analyze it
wget https://satoshistreasure.xyz/images/leporine.gif
The next thing I like to do in puzzles like these is use a tool called binwalk to analyze a file's hex to see what other files it might contain.
binwalk leporine.gif
The output of the binwalk tool looks like this:
We can clearly see that the file is made up of a GIF and a ZIP file. The next step was to extract the zip file from this file. We can use a binwalk feature to extract a file and execute a command. From the binwalk help doc:
-D, --dd=<type:ext:cmd> Extract <type> signatures, give the files an extension of <ext>, and execute <cmd>
Using this information we can construct a binwalk command to extract and unzip the embedded file:
binwalk --dd='zip archive:zip:unzip %e' leporine.gif
This tells binwalk to find zip archive files and extract them with a zip extension and then execute unzip %e where %e is a placeholder for the extraced filename. After running the command binwalk will create a directory _leporine.gif.extracted that contains our files.
If we look at the extracted leporine.txt file:
cat _leporine.gif.extracted/leporine.txt
We see the following clue:
https://satoshistreasure.xyz/eggseggseggseggsfortheeggmangetyoureggs
Use the Jade Key to open the lock
We know from the previous puzzles that the Jade Key is ST-0001-a36e904f9431ff6b18079881a20af2b3403b86b4a6bace5f3a6a47e945b95cce937c415bedaad6c86bb86b59f0b1d137442537a8.
When we use this key to decrypt the page we get this page with this text:
_____ _ _____ _ _ _ _ _____
|_ _| | | ___| | | | | | | (_) | _ |
| | | |__ ___ | |__ __ _ __ _ | |_| |_ _ _ __ | |_ _ ___ | | | |_ __
| | | '_ \ / _ \ | __|/ _` |/ _` | | _ | | | | '_ \| __| | / __| | | | | '_ \
| | | | | | __/ | |__| (_| | (_| | | | | | |_| | | | | |_ | \__ \ \ \_/ / | | |
\_/ |_| |_|\___| \____/\__, |\__, | \_| |_/\__,_|_| |_|\__| |_|___/ \___/|_| |_|
__/ | __/ |
|___/ |___/
.--------------------------------------------------------------------------------------.
| The Jade Key slides into the lock with no play, and turns at the slightest pressure |
| A soft click as if from far away comes from the lock mechanism, and it swings open |
| to reveal an empty vault, with a scrap of old paper on the floor. You pick it up and |
| read the careful handwriting: "it's time to go and stock up on eggs for the Rabbit: |
| https://happyfactory.store/collections/home/products/colorful-easter-egg |
'--------------------------------------------------------------------------------------'
When we visit this product page for the egg we see the next clue:
This is a digital egg that will be delivered to your email inbox at rapid speed by a fleet of delivery rabbits.
There are 8 limited edition versions of the egg, and a surprise awaits anyone who can put all of them together.
all revenue from egg sales will be converted to Bitcoin and sent to the Hunt Pot.
This is the first clue where being in a team appears to be very helpful. This suggests there are 8 secrets that we need to collect from buying eggs. It's not clear if each egg you buy guarantees a unique secret. Unfortunately, this part of the puzzle cannot be played again as the eggs are sold out.
If you bought enough eggs (or had teammates to help you out) you would eventually start receiving your secrets delivered to the email address you used at checkout. After gathering all 8 pieces you are able to fully reconstruct the egg image:
If you scan the QR code you get the following message:
satoshistreasure.xyz/6WskbAMc8U6m3B68DdHL2QQ822odpPG pass="a dim light illuminated the darkness, casting shadows on the walls and revealing a single key hanging from a thread in the middle of the vault"
Visiting the URL and entering the provided password reveals the congratulations page for the Leporine Key!.
_____ _ _ _ _
/ ____| | | | | | | (_)
| | ___ _ __ __ _ _ __ __ _| |_ _ _| | __ _| |_ _ ___ _ __ ___
| | / _ \| '_ \ / _` | '__/ _` | __| | | | |/ _` | __| |/ _ \| '_ \/ __|
| |___| (_) | | | | (_| | | | (_| | |_| |_| | | (_| | |_| | (_) | | | \__ \
\_____\___/|_| |_|\__, |_| \__,_|\__|\__,_|_|\__,_|\__|_|\___/|_| |_|___/
__/ |
|___/
_ _ _
| | | | | |
| |__| |_ _ _ __ | |_ ___ _ __
| __ | | | | '_ \| __/ _ \ '__|
| | | | |_| | | | | || __/ |
|_| |_|\__,_|_| |_|\__\___|_|
.--------------------------------------------------------------------------------.
| - Key Fragment # 004 - |
. .
| |
. .
| |
. .
| |
. THIS KEY IS DIGITAL TREASURE, A PRECIOUS .
| FRAGMENT OF AN ANCIENT KEY WHICH UNLOCKS |
. UNTOLD RICHES. STORE IT SOMEWHERE SAFE .
| UNTIL YOU CAN FIND 399 MORE |
. .
| |
'--------------------------------------------------------------------------------'
I envy them, Mamoru -- the humans on the cusp. Their journeys required them to actually JOURNEY,
instead of just blinking through the interstellar foam. Back then, you could still solve a puzzle
on your own, instead of just feeding it to the Omniform...
Oh, perhaps I'm wrong. But I think they must have been happier. (Intercept from ST291 Transmission)
That was a fun one!
If you weren't aware of the binwalk tool there was another less technical way to figure out about the zip file. You can use a tool to split the gif into single frames like this one. You can then downloaded the frames for further investigation. This gif generated 110 frames from the split tool. You can slowly step through each frame scanning for some kind of clue until you come to frame 32:
It's hard to see but if you zoom in you will see the words "UNZIP IT" written underneath each eye. This combined with our previous clue "nothing is what it seems" makes it clear that this gif contains a zip file that we need to unzip.
You can then just run
unzip leporine.gif
The unzip tool is able to extract the file even with the gif data at the beginning because zip extraction starts from the end of the file. You will be provided with the leporine.txt file after unzip is finished and can continue the rest of the guide from there.
WOW. thank you for this awesome breakdown. ONCE AGAIN!!! so cool.