 How's it going everybody? My name is John Hammond. It's still looking at more of the Lastest CTF challenges now. I'm looking at this new challenge on random I I guess r3 end of my whatever and the prompt is the flag is in the eye of the beholder I being a folder or something we can download so I'll save this looks like a just an image here and I'll create a new folder random I Save it in there and we'll take a look at it in our terminal I'll try to make this a little bit bigger as you can see it CD into random I and then we'll go We'll see it I'll actually take a look at what this thing is what this file I have the tiger is so I'll run file on Okay, it looks like it's a JPEG image data because if I actually try to open it I do get narrow that says I can't actually read this thing I have solved this challenge by the way, so I'm just trying to play pretend review it for you So it being a JPEG image is actually just copied over to an eye of the tiger JPEG format and I can totally just EOG and display that out with the JPEG image and it is whoa Just a picture of an eye. That's a little disconcerting and uncomfortable. Uh-huh. There's nothing in it though So I was wondering Well, should there be anything in it? I try to run like strings on and I try to look at more information But I try to grip for the flag format. There's nothing in there So I look at the hint and says whoa, okay, it's file carving Well, then in that case I can just run something like foremost or something on it So that's what I that's exactly what I did. I we can run foremost on I'll use the original file this time I'll use the PNG and when it processes it, we'll take a look at what we have now. We have the output So let's take a look what's in that directory audit.txt file It's just everything that it either found and look like it found stuff in both a JPEG file format and a PNG file format If I look at JPEG What's in there? Just like just one file looks like okay. It's the same eye image that we saw earlier What about inside PNG and I looked in that? Okay, cool. We have a we have a flag LASA CTF rest in peace my curly braces Let's go ahead and submit that as a flag LASA CTF rest in peace my curly braces and Let's get our 40 points. Good stuff a little too easy That hint was really helpful that it was just file carving and just you really just know as a as a As a good tool to use when you're doing simple stuff like that in a CTF foremost and scalpel Scalpel's another good one foremost is just awesome. I really get it extracting stuff out of a file So thanks for watching guys. Hope to see you in the next video