> For the complete documentation index, see [llms.txt](https://picoctf2019.haydenhousen.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://picoctf2019.haydenhousen.com/forensics/like1000.md).

# like1000

## Problem

> This .tar file got tarred alot. Also available at /problems/like1000\_0\_369bbdba2af17750ddf10cc415672f1c.

* [TAR File](https://github.com/HHousen/PicoCTF-2019/tree/24b0981c72638c12f9a8572f81e1abbcf8de306d/Forensics/like1000/1000.tar)

## Solution

1. Extracting the `1000.tar` file reveals `999.tar` and `filler.txt`. Extracting the `999.tar` file reveals `998.tar` and `filler.txt`.
2. Run the [script.py](https://github.com/HHousen/PicoCTF-2019/tree/24b0981c72638c12f9a8572f81e1abbcf8de306d/Forensics/like1000/script.py) to extract the files in a loop. This script uses the `tarfile` python module as described in [this article](https://www.tutorialspoint.com/How-are-files-extracted-from-a-tar-file-using-Python) and removes the `filler.txt` file after each extraction.
3. We obtain the `flag.png` nested in `1000.tar` file which has the flag: ![Flag image](/files/-MZKDLcYUC6RIyT-FvZQ)

### Flag

`picoCTF{l0t5_0f_TAR5}`