forensicsProeasy

CTF-er, который смог (The CTF-er Who Could)

bug-makers

Task: a 253531-byte file 'Bubba' with a corrupted ZIP local header and stripped central directory/EOCD. Solution: locate the deflate stream offset via surviving ux/UT extra fields and the trailing PK0708 data descriptor, then raw-deflate decompress to recover a JPEG containing the flag.

$ ls tags/ techniques/
file_carvingzip_repaircrc32deflatedata_descriptorcorrupted_archive
zip_carvingcrc32_verificationraw_deflate_decompressiondata_descriptor_anchor
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups