PDA

View Full Version : challange, find the pdf



beama
28-04-2005, 08:05 AM
found this on the net there is a pdf embeded in this image, can you extract it? (theres a hint)
Its a test of some kind
rabbit.gif (http://sal.neoburn.net/imagef1/files/rabbit.gif)

Ill tell you how in a couple of days if some one else doest post the "howto"
you will need to save the image to your pc to complete this.

ILikeLinux
28-04-2005, 08:48 AM
It's quiet easy to do, but I'm not going to spill the beans, Note you may need a hex editor to help you.

beama
28-04-2005, 08:59 AM
you can use a hex editor but theres an easier way, it involves A very common utility

ILikeLinux
28-04-2005, 09:31 AM
Yes I know, I used that way as well, but the hex editor will help you find that way.

CYaBro
28-04-2005, 09:45 AM
Here is what it says in the pdf:

IRT Spring 2005 Take Home Final
1. What are some of the ethical challenges faced by civil investigators and how do
they differ from agents of the state?
2. In your opinion what is the most important public resource for an investigator and
why?
3. Which is more important: the records search or the neighborhood investigation
and why?
4. Compared to a background investigation what additional information is required
for a financial investigation and how does one obtain it?
5. Explain the importance of discretion in handling a civil investigation.
6. What is a Sunshine Law? How does it differ from the Freedom of Information
Act?
7. Explain the term ďdumpster divingĒ and its legal limitations.
8. Preservation of evidence is of vital importance to investigative work. How does
the principle of preservation of evidence relate to digital media? Why might it be
a concern?
9. Describe how your note-taking impacted your ability to complete your
assignments.
10. On a scale of 1:10 (1 being poor and 10 being exceptional) rate the following:
Your contribution to your teamís efforts
Your teamís communication.
Who contributed the most to your teamís efforts and why?

FoxyMX
28-04-2005, 10:30 AM
:D :D :D

That was easier than the questions in the .pdf document - just don't ask me to give the answers to those. :eek:

plod
28-04-2005, 10:30 AM
yeah yeah but how to i do it (i'm on a mac).

Edward
28-04-2005, 11:21 AM
Get a deacent computer maybe?

Anyway, I'm off to find a hex editor. Cya

EDIT: Plod; it should be easy enough to do on a mac. Try using a utility like Winzip (or the mac equivilent) and ignore the warnings...

plod
28-04-2005, 11:57 AM
Well i got my self a decent computer just filling full of spyware and viruses so i have something to do tonite!
Stuffit worked cheers for that edward

Overdrive_5000
28-04-2005, 12:06 PM
Just done it that was pretty cool :thumbs: didnt know that was possible

beama
28-04-2005, 12:19 PM
kinda makes you think, what else is in those images, thank god for virus checkers (adds "jpg, png, gif" to the virus checker files to check list)

sal
28-04-2005, 12:21 PM
How would you do that easily? Embed a file in another file that is.

ILikeLinux
28-04-2005, 12:36 PM
Well all the data for the gif file has to be before the zip file, so in linux (or on a mac or in other unix like os's) you would just do



cat file1.jpg file2.zip > file.jpg
If it starts with an image, it will only show the image until it finds the line to stop showing stuff and stops.

E.g I've done it here : http://sal.neoburn.net/imagef1/files/tux1.gif

Greg
28-04-2005, 12:50 PM
Took me a bit of experimenting, but ultimately easy once you figured it.

1) Download the image.
2) Rename rabbit.gif to rabbit.zip
3) Extract it to anywhere.
4) Open irtfinal.pdf

As to how it's embedded in the first place using Windows, no idea.

ps - great quiz, and I found the answer in the first result of my Google search.

ILikeLinux
28-04-2005, 12:58 PM
As to how it's embedded in the first place using Windows, no idea.
Try opening an image with wordpad, copy all the stuff into an new file, open the text file with wordpad and copy all that data into the END of the new file that you made , then save it. I theory it should work because the image viewrs only see the first part of the file (the image part)

sal
28-04-2005, 01:10 PM
E.g I've done it here : http://sal.neoburn.net/imagef1/files/tux1.gif
"You finnished" lol :thumbs:

beama
29-04-2005, 02:56 PM
change the file extension to zip, then open with winzip or simular appllication

Edward
29-04-2005, 04:12 PM
You don't even need to rename it. Ultimatezip would open it as a .gif and sucessfuly extract it, it threw up a warning about the headers though

Overdrive_5000
29-04-2005, 04:58 PM
I just made winzip open it with no error messages what so ever, worked fine :thumbs: