March
5th,
2019
First we can see that the file is a disk image.
I used autopsy to analyze the disk image. We can see the file “flag.txt”, so I dumped it :
Now we have a file named “flag.txt” but it’s not the flag. My first idea was to try with xortool :
xortool -b flag.txt
And I was right :
And we got the flag :
Flag :
SECT{1f_U_574y_r1gh7_wh3r3_U_R,_7h3n_p30pl3_w1ll_3v3n7u4lly_c0m3_70_U}