BroncoCTF : Bundle Writeup

Short summary

A BroncoCTF writeup where a Krita resource bundle (.bundle) is unpacked as a ZIP to reveal a brush preset (.kpp) that is actually a PNG with embedded XML metadata. The flag is hidden inside a kis_text_brush definition's text attribute within the preset parameters, exploiting Krita's ability to stamp literal text as a brush pattern.

• •Krita .bundle is a ZIP containing brush presets stored as PNG-with-embedded-XML
• •Flag was embedded in a kis_text_brush text parameter inside the .kpp preset metadata
• •exiftool extracts the embedded XML preset block from the PNG metadata chunks

Generated with AI, which can make mistakes.