: Run strings 2022-06-03 11-32-03~2.png . In many versions of this challenge, the flag or a hint is appended to the end of the file in plain text, past the IEND chunk.
The first step in any forensics challenge is to verify the file type and examine basic metadata. 2022-06-03 11-32-03~2.png
: Locate the IHDR section (usually starts at offset 0x0C ). The four bytes following IHDR are the width, and the four after that are the height. : Run strings 2022-06-03 11-32-03~2
The most common solution for this specific file involves . Many CTF creators intentionally modify the height or width values in the PNG header so the image doesn't render correctly or hides the flag at the bottom. Tool : Hex Editor (like HxD or hexedit ). : Locate the IHDR section (usually starts at offset 0x0C )