Tags: forensics 

Rating:

# The Legend of Hackerman, Pt. 1
Forensics, 50 point
## Description:
> My friend Hackerman tried to send me a secret transmission, but I think some of it got messed up in transit. Can you fix it?.
## Solution:
The challenge give as a file *hackerman.png*. When we open it we can't see the image.
As the description sugest the file can be messed up. I open it with `hexeditor`
```bash
hexeditor hackerman.png
00000000 00 00 00 00 0D 0A 1A 0A 00 00 00 0D 49 48 44 52 ............IHDR
00000010 00 00 04 A8 00 00 02 9E 08 06 00 00 00 81 2E 23 ...............#
00000020 AF 00 00 28 25 7A 54 58 74 52 61 77 20 70 72 6F ...(%zTXtRaw pro
00000030 66 69 6C 65 20 74 79 70 65 20 65 78 69 66 00 00 file type exif..
00000040 78 DA AD 9C 69 92 1C 37 92 85 FF E3 14 73 04 EC x...i..7.....s..
...
```
We know that the magic bytes for png file are `0x89 0x50 0x4E 0x47 0x0D 0x0A 0x1A 0x0A`
When we fix the first 4 bytes we can open the image and get the flag: `utflag{3lit3_h4ck3r}`