forensicsProhard
Colonel
tamuctf
Task: 8GB Linux memory dump with AES-CBC encrypted flag file, known IV but unknown key. Solution: Extract kernel module key validation error logs showing two failed key attempts with different incorrect character indices, reconstruct correct 32-byte AES-256 key by combining correct characters from both attempts.
$ ls tags/ techniques/
memory_forensicskernel_log_analysiskey_reconstructionaes_decryption
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [forensics][free]TrueSecrets— hackthebox
- [reverse][free]TunnelMadness— hackthebox
- [forensics][free]Lavender— alfactf
- [misc][Pro]TeXyC— ASIS CTF
- [reverse][Pro]Nava - ASIS CTF Reverse Challenge— ASIS CTF