Writeups
search
Ctrlk
  • Writeups
  • 2020 Writeupschevron-right
    • Angstromchevron-right
    • bsidesBOSchevron-right
    • Crypto CTFchevron-right
    • Covid19 CTFchevron-right
    • FWordCTFchevron-right
    • Googlechevron-right
    • Hacktivity Conchevron-right
    • Houseplantchevron-right
    • HSCTFchevron-right
    • NahamConCTFchevron-right
    • Plaidchevron-right
    • RACTFchevron-right
    • Redpwn CTFchevron-right
    • rgbCTFchevron-right
      • miscchevron-right
      • rev|pwnchevron-right
      • ZTCchevron-right
      • webchevron-right
      • forensics:osintchevron-right
      • beginnerchevron-right
        • Joke check
        • A Basic Challenge
        • Pieces
        • Quirky resolution
        • Shoob
        • Name A More Iconic Band
        • fine day
      • cryptochevron-right
    • Sharkychevron-right
    • TJCTFchevron-right
    • Tokyo Westerns CTFchevron-right
    • Zh3r0 CTFchevron-right
  • 2021 Writeupschevron-right
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. 2020 Writeupschevron-right
  2. rgbCTFchevron-right
  3. beginner

Name A More Iconic Band

volatility image, use hashdump

volatility -f data --profile=Win7SP1x64 hashdump

Use crackstation to crack them, then cyberchef to hash them

https://gchq.github.io/CyberChef/#recipe=Sort('Line feed',false,'Alphabetical (case sensitive)')Find_/_Replace(%7B'option':'Extended (%5C%5Cn, %5C%5Ct, %5C%5Cx...)','string':'%5C%5Cn'%7D,' ',true,false,true,false)MD5()&input=c3VwZXJjb2xsaWRlcgphbnlvbmUgY2FuIHBsYXkgZ3VpdGFyCm15IGlyb24gbHVuZwprYXJtYSBwb2xpY2UKaWRpb3RlcXVlCnB5cmFtaWQgc29uZwp0aGVyZSwgdGhlcmUKd2VpcmQgZmlzaGVzL2FycGVnZ2kKbG90dXMgZmxvd2VyCmJ1cm4gdGhlIHdpdGNoarrow-up-right

hashtag
rgbCTF{cf271c074989f6073af976de00098fc4}

PreviousShoobchevron-leftNextfine daychevron-right

Last updated 5 years ago

Was this helpful?

Was this helpful?