Tags: bloodbash4 2021 deadface forensics 

Rating: 5.0

Wrtite-up Summary (link contains full solution)

Once connected to the server, you can extract the file hexdump with xxd:

xxd -ps 'De Monne Customer Portal.pdf'

Save the hexdump in your local machine.

Use xxd -r -p <file of hexdump> > readable.pdf

Now you can open the pdf file in your local machine and get the flag.

flag{deM0nn3_dat4_4_us}

Original writeup (https://sumb0dy.medium.com/deadface-ctf-2021-blood-bash-4-ef0e2ccc993b).