Uploaded October 2020 | Updated September 2026, 2 weeks ago

---

Let's explore what a file format is, and provide a different view on it. We dive into polyglots, file format research and the impact on security.

LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-system-asm-introduction/how-computers-work
Join the Hextree Discord: discord.gg/xgQpCQCpvy

Funky File Formats Talk: youtube.com/watch?v=hdCs6bPM4is
corkami/mitra tool: github.com/corkami/mitra

Guessing vs. Not Knowing featuring Steganography: youtube.com/watch?v=L1RvK1443Yw

CHAPTERS
00:00 - Is this file a PDF or a ZIP?
00:33 - File extensions on Windows
01:32 - Command-line intuition about files
02:52 - Reading the raw bytes of a ZIP
03:18 - Dissecting ZIP structures with 010 Editor
04:15 - Parser differences as a security problem
05:03 - Funky File Formats and the statue analogy
06:05 - Polyglot source code
07:18 - File formats as programming languages
08:18 - Combining a PDF and ZIP with Mitra
09:40 - How both parsers see the same file
11:25 - Better file-format CTF challenges

SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com

WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog

#CTF #FileFormats #LiveOverflow

(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.