Человеческий фактор (Human Factor)

hackerlab

Task: forensics PCAP where an intern uploads a 1 MiB encrypted file over TCP; reconstruct it and decrypt. Solution: carve the TrueCrypt volume from TCP stream 4, crack its weak dictionary password (kittykitty) with hashcat mode 6221 (SHA512+AES-XTS-512), then manually decrypt the AES-XTS volume to recover a FAT12 image holding FLAG.TXT.