>>9121911 (lb)

>>9121857 (lb)

Repost from last night on Ghidra & PDF's.

The t_d post does not show how to unredacted text. I actually tried this last Friday. I was able to view the raw bytes of one of the transcript PDF's but the problem is….I know nothing about PDF files and, more importantly, I dl'd it after Q said "insertion removed". Since then Iooked into the PDF format and found a few interesting things.

Data can be placed beyond the PDF end of file marker (eof). Apparently, when a PDF viewer sees a PDF eof marker it stops reading the file. However, the file may contain more data - it's just not displayed.

Text can be rendered using the default kerning for the font OR specific kerning by character. This reminds me of Co r ney vs Comey + the 'kerning' notable from earlier this weekend.

Text can be encoded in many different forms. ASCII, Octal and Hex are all valid, which makes viewing in a raw binary viewer awkward.

I'll leave a couple of links I found helpful & will continue to see if this is a fruitful effort.

Encoding of PDF text string

https://stackoverflow.com/a/29468049

PDF Tricks

https://code.google.com/archive/p/corkami/wikis/PDFTricks.wiki