Add 2017 CTF F100

hcastilho · hcastilho · commit 9a45dc5f8e3d · 2017-10-04T11:10:55.000+01:00
diff --git a/Forensics/100-PDFHiddenMessage/README.md b/Forensics/100-PDFHiddenMessage/README.md
@@ -0,0 +1,10 @@
+F100 - PDFHiddenMessage
+=======================
+
+We suspect an external consultant of industrial espionage. During the 
+investigation we found a usb drive on his belongings containing a single pdf.
+Help us find if he is somehow using this pdf to exfiltrate the **FLAG**.
+
+
+--
+**Pixels Camp 2017**
diff --git a/Forensics/100-PDFHiddenMessage/SOLUTION.md b/Forensics/100-PDFHiddenMessage/SOLUTION.md
@@ -0,0 +1,11 @@
+Solution
+========
+
+Use Didier Stevens `pdf-parser.py` with the command:
+`pdf-parser.py -f wine.pdf | less`
+
+
+Flag
+----
+
+`b4rc4_v3lh4`
diff --git a/Forensics/100-PDFHiddenMessage/wine.pdf b/Forensics/100-PDFHiddenMessage/wine.pdf
