SANs QA/QC

[pyrodie18]

• Name: SANs
• Designer: Troy
• Category: Forensics
• Description: Pretty sure there's more information to this report then meets the eye
• Required Resources: 2018 SANS Security Awareness Report.pdf
• Flag: acsc18{TalkAboutLayersOfSecurity}

When you are done with the QA/QC, please enter a comment stating so and how you would rate the difficulty . If you see any issues please note them in the comment as well.

• [x] Dockerized
• [ ] Tested
• [ ] Loaded to Game Engine
• [ ] Loaded to Environment
• [x] Tested in Environment

Difficulty key

0 - No background 3 - JCAC (Basic) 6 - Scripting (Senior) 9 - Reverse Engineer (Master)

Instructions: For each new challenge complete the above information. Assign the "QA/QC" and "Load Game Engine", labels to all challenges. If required add "Dockerize" and "Challenge Server" for challenges that need to be dockerized or will have to be hosted on the challenge server

[ghost]

This one was a pain in my butt.

Confirmed working, solved by:

pdf-parser.py -a pdf pdf-parser.py --object 2193 --raw --filter pdf > outfile dd bs=337 skip=1 if=outfile of=newfile (remove extraneous pdf-parser junk) binwalk newfile binwalk -e newfile file * mv 38E50 38E50.tar tar -xvf 38E50.tar base64 --decode secret.txt > file xxd file (look at magic number to determine its JFIF) open image

Difficulty: 7

[ghost]

80 points