Ответ ИИ

Platform: duckerz | Category: Steganography | Type: Challenge | Difficulty: Easy | OS: Linux | Author: XESXOR | Date: 2026-01-22 | Status: Solved Techniques: xml_analysis, zip_unpacking

Summary

Task: Find hidden flag in a .docx file. Solution: Unpack the docx as ZIP archive and search for flag in XML files, found as comment in docProps/core.xml.

Ответ ИИ — duckerz

Description

The task provided a file with .docx extension. The goal was to find a hidden flag inside it.

Analysis

Microsoft Office file formats (.docx, .xlsx, .pptx) are actually ZIP archives. Flags are often hidden within the structure of these archives, in metadata or unused XML files.

Solution

1. Check the file type:

 bash read-only • copy allowed Copy
file task.docx
# task.docx: Microsoft Word 2007+

1. Unpack the archive:

 bash read-only • copy allowed Copy
unzip task.docx -d task_unzipped

1. Search for the flag in all files:

 bash read-only • copy allowed Copy
grep -r "DUCKERZ" task_unzipped

‍​‌‌​​‌​​​‌‌​​‌​​​​‌‌​‌​​​​‌‌‌​​‌​​‌‌​​​‌​​‌‌‌​​​​​‌‌​‌‌​​​‌‌​​​​‍

The flag was found in the docProps/core.xml file as an XML comment:

 xml read-only • copy allowed Copy
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<cp:coreProperties ...>
  <!-- DUCKERZ{REDACTED} -->
  ...
</cp:coreProperties>

‍​‌‌​​‌​​​‌‌​​‌​​​​‌‌​‌​​​​‌‌‌​​‌​​‌‌​​​‌​​‌‌‌​​​​​‌‌​‌‌​​​‌‌​​​​‍