Khatrimaza-org-mkv | The

ffprobe -show_streams video.h264 ffprobe -show_streams audio.aac Both streams look clean (no extra data or unusual codec parameters). We also run strings on them, but no flag‑like patterns appear.

inp, key, outp = sys.argv[1], sys.argv[2].encode(), sys.argv[3] data = open(inp, 'rb').read() open(outp, 'wb').write(xor(data, key)) print(f'Decrypted inp → outp using key "key.decode()"') Run: The Khatrimaza-org-mkv

Comment: s3cr3t_k3y_4_f1ag That looks like a plausible key. Let’s try XOR‑decrypting hidden.bin with that key. We write a tiny Python script that repeats the key over the file and XORs each byte. ffprobe -show_streams video

out = bytes([b ^ key[i % len(key)] for i, b in enumerate(data)]) Let’s try XOR‑decrypting hidden

# 2. List attachments (if any) $ mkvextract attachments khatrimaza-org.mkv :

2 00:00:03,001 --> 00:00:07,000 Enjoy the movie. Nothing hidden in the subtitles – just a generic welcome message. We quickly glance at them with ffprobe just to be sure there’s nothing weird:

def xor(data, key): return bytes(b ^ k for b, k in zip(data, itertools.cycle(key)))