forensicsPromedium

SlackSpace

hackerlab

Task: Disk image with hidden data. Solution: Extract unallocated space, find ZIP with corrupted magic bytes, restore header, crack password with john.

$ ls tags/ techniques/
magic_bytespassword_crackingjohn_the_ripperext4slack_spaceunallocated_spacefile_carvingzip_repairsleuthkit
Ext4 filesystem forensics with sleuthkitUnallocated space extraction and analysisZIP magic bytes reconstructionPassword-protected ZIP cracking
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups