CTF

Challenge Name Challenge link Type Lazaretto ✔ Download Forensics Hotel ✔ Download Forensics Subscription Download Forensics Geology docker pull cyctf/geology Forensics imPOSTer ✔ Download Forensics Mach ✔ Download Mobile Lazaretto Challege Description Writeup we were provided with an ad1 file using FTKimager we were able to open it and it had only windows event logs So i just dumped the files and using the famous ericzimmerman tool EvtxECmd i was able to pares the full events into a csv file using this command...

Challenge We were provided with this info https://77.87.243.155 username: alpha password: 900d1uck734m41ph4 and we will use it to login to the web kalIbox that we will use to solve the machine Writeup I had a little idea that they have the machine on the same box so Ichecked the hosts to know the ip cat /etc/hosts yup I was right the ip was there 192.168.204.3 funbox11 let’s scan it using nmap...

Digital Forensics Fe01 It was an easy one there was a .rtf file when i opened it using (“libre office Writer”) i found: by clicking (Ctr+A) I selected all the right clicked to choose paragraph - Text Body the flag appered the flag was : n𝑖𝐶𝑒𝐴𝑛𝐷𝐸𝑎𝑠𝑦10018 Fe02 it was a PDF File with a black mark that hide some parts of the text, I Opend it using (“Atril Document Viewer”) And that what appered:...