RSS Amplifier

Jett's blog · Apr 5, 2022

picoCTF 2022 Sleuthkit Apprentice Writeup

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

The Problem is the following: Download & extract the image Run the following command: wget https://artifacts.picoctf.net/c/336/disk.flag.img.gz gunzip disk.flag.img.gz a file named disk.flag.img should show up at your working directory. Finding the flag with autopsy In the following steps, I will demonstrate how to extract the key with autopsy, the graphical user interface for sleuthkit. This tool…

The Problem is the following: Download & extract the image Run the following command: wget https://artifacts.picoctf.net/c/336/disk.flag.img.gz gunzip disk.flag.img.gz a file named disk.flag.img should show up at your working directory. Finding the flag with autopsy In the following steps, I will demonstrate how to extract the key with autopsy, the graphical user interface for sleuthkit. This tool is built into kali linux. First, run autopsy and open localhost:9999/autopsy Use the graphical user interface to open a new case, and click through the default options until “Add A New Image”:

Read on /posts/sleuthkit-apprentice/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.