PDF by fdpumyp (CTF Learn)

Forensics

Challenge — PDF by fdpumyp — CTFlearn — CTF Practice — CTF Problems — CTF Challenges

Hi, just as we talked during a break, you have this file here and check if something is wrong with it. That’s the only thing we found strange with this suspect, I hope there will be a password for his external drive

Bye

Don’t forget we always work inside VMs .

So we’ll upload the file there and then :

We took the download link and used wget to download the :

I always change the names to something that is closest to what we do, so I changed the name of the file to the name of the task that we are doing now , Now let’s get started :

Here we define the file type , There are a lot of interesting things :

I decided to use exif and exiftool , Nothing important

Let’s search using strings :

With the use of strings, at the end of the file I found some information :

I took this, and searched it on https://cyberchef.org/

Here is the flag

See you soon in other reports….!!

Abdelwahab_Shandy

AS_Cyber