View Full Version : challange, find the pdf

28-04-2005, 08:05 AM
found this on the net there is a pdf embeded in this image, can you extract it? (theres a hint)
Its a test of some kind
rabbit.gif (http://sal.neoburn.net/imagef1/files/rabbit.gif)

Ill tell you how in a couple of days if some one else doest post the "howto"
you will need to save the image to your pc to complete this.

28-04-2005, 08:48 AM
It's quiet easy to do, but I'm not going to spill the beans, Note you may need a hex editor to help you.

28-04-2005, 08:59 AM
you can use a hex editor but theres an easier way, it involves A very common utility

28-04-2005, 09:31 AM
Yes I know, I used that way as well, but the hex editor will help you find that way.

28-04-2005, 09:45 AM
Here is what it says in the pdf:

IRT Spring 2005 Take Home Final
1. What are some of the ethical challenges faced by civil investigators and how do
they differ from agents of the state?
2. In your opinion what is the most important public resource for an investigator and
3. Which is more important: the records search or the neighborhood investigation
and why?
4. Compared to a background investigation what additional information is required
for a financial investigation and how does one obtain it?
5. Explain the importance of discretion in handling a civil investigation.
6. What is a Sunshine Law? How does it differ from the Freedom of Information
7. Explain the term ďdumpster divingĒ and its legal limitations.
8. Preservation of evidence is of vital importance to investigative work. How does
the principle of preservation of evidence relate to digital media? Why might it be
a concern?
9. Describe how your note-taking impacted your ability to complete your
10. On a scale of 1:10 (1 being poor and 10 being exceptional) rate the following:
Your contribution to your teamís efforts
Your teamís communication.
Who contributed the most to your teamís efforts and why?

28-04-2005, 10:30 AM
:D :D :D

That was easier than the questions in the .pdf document - just don't ask me to give the answers to those. :eek:

28-04-2005, 10:30 AM
yeah yeah but how to i do it (i'm on a mac).

28-04-2005, 11:21 AM
Get a deacent computer maybe?

Anyway, I'm off to find a hex editor. Cya

EDIT: Plod; it should be easy enough to do on a mac. Try using a utility like Winzip (or the mac equivilent) and ignore the warnings...

28-04-2005, 11:57 AM
Well i got my self a decent computer just filling full of spyware and viruses so i have something to do tonite!
Stuffit worked cheers for that edward

28-04-2005, 12:06 PM
Just done it that was pretty cool :thumbs: didnt know that was possible

28-04-2005, 12:19 PM
kinda makes you think, what else is in those images, thank god for virus checkers (adds "jpg, png, gif" to the virus checker files to check list)

28-04-2005, 12:21 PM
How would you do that easily? Embed a file in another file that is.

28-04-2005, 12:36 PM
Well all the data for the gif file has to be before the zip file, so in linux (or on a mac or in other unix like os's) you would just do

cat file1.jpg file2.zip > file.jpg
If it starts with an image, it will only show the image until it finds the line to stop showing stuff and stops.

E.g I've done it here : http://sal.neoburn.net/imagef1/files/tux1.gif

28-04-2005, 12:50 PM
Took me a bit of experimenting, but ultimately easy once you figured it.

1) Download the image.
2) Rename rabbit.gif to rabbit.zip
3) Extract it to anywhere.
4) Open irtfinal.pdf

As to how it's embedded in the first place using Windows, no idea.

ps - great quiz, and I found the answer in the first result of my Google search.

28-04-2005, 12:58 PM
As to how it's embedded in the first place using Windows, no idea.
Try opening an image with wordpad, copy all the stuff into an new file, open the text file with wordpad and copy all that data into the END of the new file that you made , then save it. I theory it should work because the image viewrs only see the first part of the file (the image part)

28-04-2005, 01:10 PM
E.g I've done it here : http://sal.neoburn.net/imagef1/files/tux1.gif
"You finnished" lol :thumbs:

29-04-2005, 02:56 PM
change the file extension to zip, then open with winzip or simular appllication

29-04-2005, 04:12 PM
You don't even need to rename it. Ultimatezip would open it as a .gif and sucessfuly extract it, it threw up a warning about the headers though

29-04-2005, 04:58 PM
I just made winzip open it with no error messages what so ever, worked fine :thumbs: