PDF - Forensics Challenge Writeup (scriptCTF 2025)

Took part in the recently concluded scriptCTF with my team 5n1ck3rD00dl3 and solved challenges from forensics, crypto and misc, eventually securing 331st place in our 3rd major CTF(Capture the Flag) Contest.

Category: Forensics
Author: Connor Chang
Flag Format: scriptCTF{flag}

Description: so sad cause no flag in pdf :(

The attachment contained a pdf file, upon opening that I was welcomed with thx for comming but no flag here :) but the comments added to the pdf provided a hint.

Running strings on the file provided a flag instantly.

But that turns out to be a fake flag. So, continued with binwalk and found a zlib file at offset 0×11B.

Then Extracting it

revealed the target file _challenge.pdf.extracted/11B that contained the flag :

Happy Hacking!!