Cat

Platform: HackTheBox | Category: Mobile | Difficulty: Easy | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

Easy leaks

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. First, unzip the .zip file given.

2. Check the file type.

3. Since it's an android backup file, we can extract it using abp or android-backup-processor.

java -jar abp.jar unpack cat.ab cat.rar

1. Extract the .rar file.

2. We got 2 new folders.

3. Let us jump to shared.

JUMP TO 0

1. I checked every folder but got nothing, except the Pictures.

PICTURES

1. Something caught my attention when i checked image IMAG0004.jpg.

IMAG0004.jpg

1. When i zoomed in at the bottom of paper the person's holding.

2. Got the flag!

Flag

REDACTED

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.