Unsafe PDF

They've put javascript in my PDF!! Get it out of there!!! Files available here Author: @scuffed

By putting the pdf given into Cyberchef, we can see that there is some javascript in the PDF

Some very cool JS script

So since its a reverse chall, we have to reverse engineer this to get back the original flag.

Thus by creating this script, we are able to obtain the flag

grass = [
    39, 199, 20, 133, 19, 174, 186, 16, 102, 83, 172, 147, 207, 223, 81, 237, 
    78, 237, 209, 58, 38, 92, 38
]

def reverse_world(a):
    return ((a & 0xf) << 4) + (a >> 4)

def space(n):
    a = 0
    b = 1
    o = []
    for i in range(n):
        c = a + b
        a = b
        b = c
        o.append(a % 256)
    return o

def decode_flag(grass):
    fib_sequence = space(len(grass))
    flag = []
    for i in range(len(grass)):
        decoded_char = grass[i] ^ fib_sequence[i]
        reversed_char = reverse_world(decoded_char)
        flag.append(chr(reversed_char))
    return ''.join(flag)

decoded_flag = decode_flag(grass)
print(f"Decoded Flag: {decoded_flag}")

After running this, we obtain Decoded Flag: blahaj{PDF_0bj3c7_HuN7}, thus the flag is blahaj{PDF_0bj3c7_HuN7}