forensicsmedium
Time Capsule
tamuctf
Task: ext4 disk image with 17 image files, flag hidden somewhere. Solution: timestamps encode ASCII via minutes×60+seconds formula, reading files in order spells the flag.
$ ls tags/ techniques/
ascii_decodingfilesystem_forensicstimestamp_analysisinode_metadata_extraction
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]