> For the complete documentation index, see [llms.txt](https://simon-6.gitbook.io/simoncyber/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://simon-6.gitbook.io/simoncyber/ctf-writeups/picoctf-2025/forensics/red-easy.md).

# RED (Easy)

I don't suspect this one to be too hard since it's just a png but we'll see.

<figure><img src="/files/Z70R4wlxkPw3mHXdTjWA" alt=""><figcaption></figcaption></figure>

***

The first thing I would do with file forensics is just to run some basic CLI commands to it. (like even cat)

<figure><img src="/files/sfIGYrajzUOKR16HPwIJ" alt=""><figcaption></figcaption></figure>

Running cat gives us some poem. Not really helpful but let's keep going.&#x20;

<figure><img src="/files/GpAS7o2d1oecHMfIWsQA" alt=""><figcaption></figcaption></figure>

Knowing all of the commands didn't really work, we'll have to resolved to some websites, or rather the website, Aperi Solve.

***

<figure><img src="/files/lYGQ9nGdkG6PxV6w2845" alt=""><figcaption></figcaption></figure>

After just loading it and scrolling for a bit, we can find the flag under the Zsteg tab encoded in base64. Pretty simple challenge!&#x20;