skip to main content
hacking.communityplay in the sandbox.

Hidden-Metadata Pivoting

osint · easy · +30 XP

Target

GET /api/lab/metadata-strip-101/pdf-meta (parsed PDF metadata) POST /api/lab/metadata-strip-101/submit body {author_email_domain}

Goal: the metadata contains Author=Alex Reed, Creator=Microsoft Word 16, and a hidden AuthorEmail field. Submit the email's domain — that's the institution.

// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/metadata-strip-101/
// reuse on the cli
// submit flag
// no solves yet

// go deeper

// install app

Install hacking.community for fast access, offline reading, and push notifications. No app store needed.