inflate the flatedecode stream ?

[freelancer_blr]

Can somebody help me how to inflate the flatedecode stream please. ?

[SysAdMini]

Where is the file ?

[freelancer_blr]

just tell me the steps .. i will try out here.

i tried out pdf-parser -f switch and pdftk as well but doesn't work

[Garlando]

do it manually

<?php
$x = 'gz compressed stream';
echo gzuncompress($x);
?>

[MysteryFCM]

just tell me the steps .. i will try out here.

i tried out pdf-parser -f switch and pdftk as well but doesn't work

Without the file, it's a little difficult to determine *WHY* it's not working for you, so unless you're prepared to provide either the file, or URL to such, it's unlikely you're going to be assisted.

[MysteryFCM]

do it manually

<?php
$x = 'gz compressed stream';
echo gzuncompress($x);
?>

Bear in mind, this won't work for some PDFs ITW, and additionally risks, running the actual code inside them if using this method (you'd be better off dumping the data to a file, rather than echo'ing it out).

[Garlando]

do it manually

<?php
$x = 'gz compressed stream';
echo gzuncompress($x);
?>

Bear in mind, this won't work for some PDFs ITW, and additionally risks, running the actual code inside them if using this method (you'd be better off dumping the data to a file, rather than echo'ing it out).

it won't be executed anyways, browsers require <script> tags, pdf dont

[MysteryFCM]

I've come across a few PDFs that I've decoded using that method, and a couple of them have still executed, thanks to Adobe being plugged into IE (one of the reasons I don't run Adobe now).

[freelancer_blr]

here is the stream code

[WIEx]

double flate

[parody]

He's wanting us to do the puzzle on http://blog.didierstevens.com/2010/06/03/a-win7-puzzle/    Nice try...   BUT NO WINDOWS LICENSE FOR YOU!   ONE YEAR!  </soupnazi>

[freelancer_blr]

nah . not for license... i am a newbie to this domian ... needs to understand.  seems thy have used pdftk to uncompress then they have used hexdump to decode the text ... can someone explain me please .. why those steps are taken out ?

[binary]

Here you go... I used notepad to extract the stream from the PDF.

Use the python script against all the attached file. If you use the script against "puzzle - stream extracted - 397 byte" you will get "stream after first decoding".... if you use the script against that you will get the a 100 mb file that's filled with hex '20' (spaces).... if you search through them you will get the answer for the puzzle - "De Ultieme Hallucinatie"

By the way results are already out...