Tags: forensics binwalk 

Rating:

Running `binwalk` on the file tells us there is a PDF file located at offset 0x1CAB6. We can write a Python program to extract it:

```py
r = open('babyhide.jpeg', 'rb').read()
w = open('babyhide.pdf', 'wb')

w.write(r[0x1CAB6:])
w.close()
```

Opening up the pdf gets us the flag!

flag{baby_come_back}

Original writeup (https://nightxade.github.io/ctf-writeups/writeups/2023/Cyber-Cooperative-CTF-2023/forensics/babyhide.html).