CHIqueen
OtterCTF 2018 What the password? 본문
you got a sample of rick's PC's memory. can you get his user password? format: CTF{...}
메모리에서 비밀번호를 얻어내면 됩니다.
1. vol.py -f OtterCTF.vmem --profile=Win7SP1x64 mimikatz
2. rekall -f OtterCTF.vmem mimikatz
CTF{MortyIsReallyAnOtter}
'포렌식 > CTF' 카테고리의 다른 글
| OtterCTF 2018 Play Time (0) | 2018.12.14 |
|---|---|
| OtterCTF 2018 General Info (0) | 2018.12.14 |
| TJCTF 2018 Ssleepy write-up (0) | 2018.10.19 |
| TJCTF 2018 Volatile Virus write-up (0) | 2018.10.19 |
| Swamp CTF 2018 Wild Night Out write-up (0) | 2018.10.16 |
'포렌식/CTF' Related Articles
more
Comments