Blog Archives


Link: (only for logged in users) Points: 50 Category: forensic, warmup Description Today, our 3-disk NAS has failed. Please recover flag. deadnas.7z Hint 1: The NAS used RAID. Hint 2: RAID-5 Solution

From above output we know that disk1 is missing.

Read more ›

WYGINWYS(what you get is not what you see)

Link: Points: 200 Category: Forensics Description nc 7337 tl;dr Zip archive containing disk image. Mount it with ntfs-3g. There is a binary file and after looking for deleted files you can also find a .pyc file. Turns out the

Read more ›


Link: Author: Vishrut Kumar Mishra Points: 70 Category: forensic, sound Description Vector recorded this audio when Gill Bates was opening his/her vault and Gru stole this recording from him (stealing from a thief ain’t a crime, right?). Help Gru

Read more ›