Foremost on 4n6Posthttps://4n6post.com/tags/foremost/Recent content in Foremost on 4n6Posthidemehttps://4n6post.com/writeups/picoctf/hideme/2024-01-01Description Every file gets a flag. The SOC analyst saw one image been sent back and forth between two people. They decided to investigate and found out that there was more than what meets the eye here. Info Doing a binwalk we get: DECIMAL HEXADECIMAL DESCRIPTION 0 0x0 PNG image, 512 x 504, 8-bit/color RGBA, non-interlaced 41 0x29 Zlib compressed data, compressed 39739 0x9B3B Zip archive data, at least v1.0 to extract, name: secret/ 39804 0x9B7C Zip archive data, at least v2.