Ulli Weichert/ April 5, 2022/ IT-Security, Write-Ups/ 0Kommentare

File types

Description

This file was found among some files marked confidential but my pdf reader cannot read it, maybe yours can.
You can download the file from here.

Solving

1. The file Flag.pdf isn't a pdf file

   1. If you check it with file Flag.pdf, you'll see, that it is a shell archive

      Flag.pdf: shell archive text

2. If you execute this archive, it will lead into some nested archives.

3. Just keep extracting - renaming - extracting - renaming and in the end you will get the flag

4. Finally you will get a text file with some hex strings...

5. CyberChef and the "From Hex" function will help you to get the flag.