Comments
Category: Forensics
477 points
Changing the contents of file will result in loosing the flag. So I repeat dont change its contents
file: Comments.docx
Solution
unar Comments.docx
Zip
[Content_Types].xml (1576 B)... OK.
docProps/ (dir)... OK.
docProps/core.xml (751 B)... OK.
docProps/app.xml (984 B)... OK.
_rels/ (dir)... OK.
_rels/.rels (590 B)... OK.
word/ (dir)... OK.
word/_rels/ (dir)... OK.
word/_rels/document.xml.rels (1081 B)... OK.
word/document.xml (2624 B)... OK.
word/footnotes.xml (2634 B)... OK.
word/endnotes.xml (2628 B)... OK.
word/theme/ (dir)... OK.
word/theme/theme1.xml (8393 B)... OK.
word/webSettings.xml (655 B)... OK.
word/styles.xml (30321 B)... OK.
word/fontTable.xml (1684 B)... OK.
word/settings.xml (3305 B)... OK.
Successfully extracted to "Comments".
cd Comments
grep -ir CTF *
word/document.xml:<w:document xmlns:wpc="http://schemas.microsoft.com/office/word/2010/wordprocessingCanvas" xmlns:cx="h
ttp://schemas.microsoft.com/office/drawing/2014/chartex" xmlns:cx1="http://schemas.microsoft.com/office/drawing/2015/9/8
/chartex" xmlns:cx2="http://schemas.microsoft.com/office/drawing/2015/10/21/chartex" xmlns:cx3="http://schemas.microsoft
.com/office/drawing/2016/5/9/chartex" xmlns:cx4="http://schemas.microsoft.com/office/drawing/2016/5/10/chartex" xmlns:cx
5="http://schemas.microsoft.com/office/drawing/2016/5/11/chartex" xmlns:cx6="http://schemas.microsoft.com/office/drawing
/2016/5/12/chartex" xmlns:cx7="http://schemas.microsoft.com/office/drawing/2016/5/13/chartex" xmlns:cx8="http://schemas.
microsoft.com/office/drawing/2016/5/14/chartex" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" x
mlns:aink="http://schemas.microsoft.com/office/drawing/2016/ink" xmlns:am3d="http://schemas.microsoft.com/office/drawing
/2017/model3d" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:r="http://schemas.openxmlformats.org/officeDocume
nt/2006/relationships" xmlns:m="http://schemas.openxmlformats.org/officeDocument/2006/math" xmlns:v="urn:schemas-microso
ft-com:vml" xmlns:wp14="http://schemas.microsoft.com/office/word/2010/wordprocessingDrawing" xmlns:wp="http://schemas.op
enxmlformats.org/drawingml/2006/wordprocessingDrawing" xmlns:w10="urn:schemas-microsoft-com:office:word" xmlns:w="http:/
/schemas.openxmlformats.org/wordprocessingml/2006/main" xmlns:w14="http://schemas.microsoft.com/office/word/2010/wordml"
xmlns:w15="http://schemas.microsoft.com/office/word/2012/wordml" xmlns:w16cid="http://schemas.microsoft.com/office/word
/2016/wordml/cid" xmlns:w16se="http://schemas.microsoft.com/office/word/2015/wordml/symex" xmlns:wpg="http://schemas.mic
rosoft.com/office/word/2010/wordprocessingGroup" xmlns:wpi="http://schemas.microsoft.com/office/word/2010/wordprocessing
Ink" xmlns:wne="http://schemas.microsoft.com/office/word/2006/wordml" xmlns:wps="http://schemas.microsoft.com/office/wor
d/2010/wordprocessingShape" mc:Ignorable="w14 w15 w16se w16cid wp14"><w:body><w:p w:rsidR="00062CC9" w:rsidRDefault="009
95EEA"><w:r><w:t>vishwaCTF{f@ls3_fl@g</w:t></w:r><w:r w:rsidR="00511CEE"><w:t>}</w:t></w:r><w:bookmarkStart w:id="0" w:n
ame="_GoBack"/><w:bookmarkEnd w:id="0"/></w:p><w:sectPr w:rsidR="00062CC9"><w:pgSz w:w="11906" w:h="16838"/><w:pgMar w:t
op="1440" w:right="1440" w:bottom="1440" w:left="1440" w:header="708" w:footer="708" w:gutter="0"/><w:cols w:space="708"
/><w:docGrid w:linePitch="360"/></w:sectPr></w:body></w:document>
word/settings.xml:<!--vishwaCTF{comm3nts_@r3_g00d}-->
Flag
vishwaCTF{comm3nts_@r3_g00d}