Tags: pdf pdfstreamdumper forensics 

Rating: 4.0

Perfectly Disinfected

image

This was a very easy one for me as I already had a tool installed that's very good in finding hidden stuff in PDFs. I've used PDFStreamDumper before in other CTFs and it found the flag for me right away in the first item in the list, in the Title:

image

flag{b00acdc78749b378f8f4889f8243789304abe928}

Original writeup (https://github.com/LazyTitan33/CTF-Writeups/blob/main/Nahamcon2023/Forensics/Perfectly_Disinfected.md).