> For the complete documentation index, see [llms.txt](https://encient.gitbook.io/ctf-writeups-and-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://encient.gitbook.io/ctf-writeups-and-notes/ctf-platform/skr-ctf/forensics/flags-in-zip.md).

# Flags in ZIP

## Description

My friend Godam send me a ZIP file, he said got a secret message inside.. Can you help me to find out the secret he is hiding?

Attachment: `chall.zip`

## Solution

<figure><img src="https://3139068166-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F5otAmBnHXiDB0QXOOAMF%2Fuploads%2F5mGigAHyZJkTJrh0vlpH%2Fflags-in-zip-1.png?alt=media&amp;token=0f9b2c4c-4191-4b45-980b-57c6579da1ad" alt=""><figcaption></figcaption></figure>

Put the zip file into FTK Imager, click the `flag` folder and the flag will be in the hex section (red arrow).