CHIqueen

OtterCTF 2018 Silly Rick 본문

포렌식/CTF

OtterCTF 2018 Silly Rick

사용자 CHIqueen 2018. 12. 14. 14:33

Silly rick always forgets his email's password, so he uses a Stored Password Services online to store his password. He always copy and paste the password so he will not get it wrong. whats rick's email password?

 

이메일 비밀번호를 복사해서 붙여 넣는다고 합니다. 그러면 클립보드에 저장되어 있을테니 클립보드를 떼봅시다.

$ vol.py -f OtterCTF.vmem --profile=Win7SP1x64 clipboard

Volatility Foundation Volatility Framework 2.6

Session    WindowStation Format                         Handle Object             Data                                              

---------- ------------- ------------------ ------------------ ------------------ --------------------------------------------------

         1 WinSta0       CF_UNICODETEXT                0x602e3 0xfffff900c1ad93f0 M@il_Pr0vid0rs                                    

         1 WinSta0       CF_TEXT                          0x10 ------------------                                                   

         1 WinSta0       0x150133L              0x200000000000 ------------------                                                   

         1 WinSta0       CF_TEXT                           0x1 ------------------                                                   

         1 ------------- ------------------           0x150133 0xfffff900c1c1adc0

 

CTF{M@il_Pr0vid0rs}

'포렌식 > CTF' 카테고리의 다른 글

OtterCTF 2018 Bit 4 Bit  (0) 2018.12.14
OtterCTF 2018 Hide And Seek  (0) 2018.12.14
OtterCTF 2018 Silly Rick  (0) 2018.12.14
OtterCTF 2018 Name Game  (0) 2018.12.14
OtterCTF 2018 Play Time  (0) 2018.12.14
OtterCTF 2018 General Info  (0) 2018.12.14
0 Comments
댓글쓰기 폼