Description
The Network Operations Center (NOC) of your local institution picked up a suspicious file, they’re getting conflicting information on what type of file it is. They’ve brought you in as an external expert to examine the file. Can you extract all the information from this strange file?Download the suspicious file here.
Steps :
open the pdf and see whats inside : it have a text saying “1n_pn9_&_pdf_2a6a1ea8}”, pn9 may be a hint for a hidden png.
after some research i looked into hex on the pdf and notice .PNG
header.
00000000 89 50 4E 47 0D 0A 1A 0A 00 00 00 0D 49 48 44 52 00 00 00 32 00 00 00 32 08 06 00 00 00 1E 3F 88 B1 00 00 01 85 69 43 43 50 49 43 43 .PNG........IHDR...2...2......?......iCCPICC
tried to convert .pdf into “.png”, and yeahhhhh.
here is the flag.png, putting the all parts together :
FLAG : picoCTF{f1u3n7_1n_pn9_&_pdf_2a6a1ea8}