Read Askew Manuscripts - 4

  1. We are now tasked with downloading that image that was taken and viewing the flag on the image.

  2. Using grep we search for only files that contain the targeted user.

  1. Using this command we can dump the file using its address. We are dumping it into our /tmp directory.

python2 vol.py -f /home/.../.../ICS_CISA_24/virbank/read_askew_manuscripts/memdump.raw --profile=WinXPSP3x86 dumpfiles -n --dump-dir=/tmp -Q 0x0000000009769228
  1. Looking at the image we get our flag.

Last updated

Was this helpful?