Tags: forensics 

Rating:

# Cool Image

```
My friend told me he found a really cool image, but I couldn't open it. Can you help me access the image?
```

We're given a PDF, but we're told that it's an image. Additionally, if we check the magic number, we can see that it's a png.

```
$ xxd cool.pdf | head -n 1
00000000: 8950 4e47 0d0a 1a0a 0000 000d 4948 4452 .PNG........IHDR
```

We can go ahead and just view it by changing the extension.

```
$ cp cool.pdf cool.png
```

![](https://raw.githubusercontent.com/shawnduong/ctf-writeups/master/2019-HSCTF6/images/cool.png)

Original writeup (https://github.com/shawnduong/ctf-writeups/blob/master/2019-HSCTF6/Forensics/cool-image.md).