Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
PDF files contain multiple object streams. Find the flag hidden in one of them. Learn to understand PDF internal structure and extract hidden data. Provided file: document.pdf
Use pdfinfo or pdftk to inspect PDF metadata
Expand objects with qpdf --qdf --object-streams=disable document.pdf uncompressed.pdf
Run strings uncompressed.pdf | grep KINOCO on the expanded PDF