Author: Connor Chang
i accidentally vanished my flag, can u find it for me
We were given stick.img which was a really small MBR boot sector. A simple strings on the image showed a few file names:
❯ strings stick.img
mkfs.fat
NO NAME FAT32
This is not a bootable disk. Please insert a bootable floppy and
press any key to try again ...
RRaA
rrAa
mkfs.fat
NO NAME FAT32
This is not a bootable disk. Please insert a bootable floppy and
press any key to try again ...
RRaA
rrAa
NOTES TXT
RANDOM~1TXT
ECRET~1GZ
Notes:
- practice my zarrow shuffle
- learn some false cuts
- play some sts
i wonder where i put the flag. did i palm it somewhere?
flag.txt
513L
7/2LHowever on mounting the image, you can’t find flag.txt or the .gzip mentioned
❯ ll /mnt/
Permissions Size User Date Modified Name
.rwxr-xr-x 76 root 17 Jul 22:27 notes.txt
.rwxr-xr-x 56 root 17 Jul 22:27 random_thoughts.txtThe solution is just a simple binwalk on the image, it extracts the flag.txt. Very simple
scriptCTF{1_l0v3_m461c_7r1ck5}