forensicsPromedium
Блокнот (Notepad)
hackerlab
Task: Windows Notepad memory dump (Mini DuMP) containing encrypted flag. Solution: Search for UTF-16LE strings, find AES-ECB encryption code with key, decrypt Base64-encoded ciphertext.
$ ls tags/ techniques/
memory_forensicsutf16le_searchaes_ecb_decryption
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [crypto][Pro]Одноразовый блокнот (One-Time Pad)— hackerlab
- [forensics][Pro]Oleg— duckerz
- [reverse][Pro]Разминка (Warmup)— hackerlab
- [forensics][Pro]Какой-то DMP...— hackerlab
- [reverse][Pro]Защищенный банк (Protected Bank)— duckerz