Careful with Trust

hackerlab

Task: a cropped PNG screenshot contains hidden data after the IEND chunk due to Windows Snipping Tool not truncating the file (aCropalypse / CVE-2023-28303). Solution: extract trailing IDAT chunks, recover the deflate stream at the correct bit offset, and reconstruct the original full-screen image to reveal a bank card with the flag.