CTF: ASIS CTF Finals 2017 Points: 343 Category: forensic Recon In this task we were provided with a file called ifhe_Find_Out [sic]. Let’s try to find some information about it:
|
1 2 |
$ file ifhe_Find_Out ifhe_Find_Out: data |
Well, that’s not helpful at all. Time to look…
When dealing with firmware images we often find large blobs of binary data which look totally random. The key question then is whether they are encrypted or compressed and which algorithm was used? During Veles development I noticed that for…
Link: https://score.ctf.westerns.tokyo/problems/5 (only for logged in users) Points: 50 Category: forensic, warmup Description Today, our 3-disk NAS has failed. Please recover flag. deadnas.7z Hint 1: The NAS used RAID. Hint 2: RAID-5 Solution
|
1 2 3 4 5 6 7 8 9 10 11 12 |
$file disk* disk0: DOS/MBR boot sector, code offset 0x3c+2, OEM-ID "mkfs.fat", sectors/cluster 4, root entries 512, sectors 2048 (volumes <=32 MB) , Media descriptor 0xf8, sectors/FAT 2, sectors/track 32, heads 64, reserved 0x1, serial number 0x867314a9, unlabeled, FAT (12 bit) disk1: ASCII text disk2: data $ ls -lh 512K disk0 12 disk1 512K disk2 $ cat disk1 crashed :-( |
From above output we know that disk1 is missing.…
Link: https://wargame.whitehat.vn/Challenges/DetailContest/143 Points: 200 Category: Forensics Description http://material.wargame.whitehat.vn/contests/11/for1_206e72e52f2f73fa1a1080b70d528657.zip nc 118.70.80.143 7337 tl;dr https://codisec.com/veles/. Zip archive containing disk image. Mount it with ntfs-3g. There is a binary file and after looking for deleted files you can also find a .pyc file. Turns out the…
Points: 100 Categories: forensic, network Task description “Mysterious traffic”, or in other words, we have a dump of network traffic and we’re asked to analyze what it says. Provided is a pcapng file with the dump of the traffic. tl;dr…
Link: https://backdoor.sdslabs.co/challenges/DTUNE Author: Vishrut Kumar Mishra Points: 70 Category: forensic, sound Description Vector recorded this audio when Gill Bates was opening his/her vault and Gru stole this recording from him (stealing from a thief ain’t a crime, right?). Help Gru…