The document draws analogies between file formats and animals. It discusses how files can be identified by metadata or branding like cattle, but these can be faked. It also discusses how the same data can be parsed differently by experts in different fields. Files can contain extra or foreign data and still be valid, like if a cow swallowed a microSD card. The document also mentions polyglot files that contain multiple file types and chimera files with multiple bodies or heads.

1. Let’s talk about...
(analogies between animals & file formats)

3. Identification

4. By its head ?

5. By shape ?

6. By sound ?

7. metadata
aka who’s the owner?

8. A hidden cow just looks like another cow...

9. … so cattle is branded.

10. But brandings can be faked!
or “patched” into another symbol

11. … and in a pure PoC||GTFO fashion,
Munin forged a branding iron !

12. Parsing

13. This is a how a user sees a cow.

14. This is how an expert sees a cow...

15. This is how another expert sees a cow !

16. Same data, different parsers
it would have been too easy ;)

17. Standard properties

18. Cow can be seen in chunks.

19. It’s a complete cow (you can see its whole body), with something next.
A cow with appended data is still valid cow.

20. If our cow swallows a microSD, it’s still a valid cow!
Even if it contains foreign data, that is tolerated by the system.

21. Extremes bypass rules
(this example is actually a hoax)
se non è vero, è ben trovato

22. A farmer was denied permit to build a horse shelter,
so he builds giant table & chairs which don’t need a permit.

23. Polyglots
1 file, 2+ types

24. the town musicians of Bremen
(a donkey, a dog, a cat, a rooster)

25. If our cow keeps a frog in its mouth, it can also speak 2 languages!

26. Chimera
count head, or bodies ?

27. Cerbero
same type of heads

28. @angealbertini
corkami.com
Damn, that's the second time those alien bastards shot up my ride!