728x90
반응형

Forensics/Figuring Out The Past

 

 need decryption key to download file via this mega link

 

 

 

 

 

it needs password

 

firefox

nothing :(

 

 

nothing in lastpass

hmm


https://github.com/anas-jamal/DarkCON-2021/tree/master/Figuring-Out-The-Past

왜 내가 하면 iehistory에서 안나오지..

defuse.ca를 찾아볼걸 그랬네


Forensics/Scattered Pieces

 

a pcapng file

mega link decryption key

 

in sus.pcapng, mega.nz 접속 흔적

 

ssl key log

728x90

log file IN

 

decrypt

reveal link

download it

 

open with hex editor and fix signature

 

dictionary attack (rockyou.txt)

 


Forensics/Do you know them ?

extract NTUSER.DAT

 

use regripper


Forensics/Mr.Wolf Darkest Secret

hmm


https://github.com/anas-jamal/DarkCON-2021/tree/master/Wolf-Darkest-Secret

 

728x90
반응형

'CTF Write Up' 카테고리의 다른 글

Tenable CTF 2021 write up  (0) 2021.02.23
Union CTF 2021 Write up  (0) 2021.02.22
SecureBug CTF 2021 write up  (0) 2021.02.18
TrollCAT CTF write up  (0) 2021.02.07
justCTF 2020 write up  (0) 2021.02.01

+ Recent posts