# picoCTF Forensics #### 1. DISKO 1 ![image](https://hackmd.io/_uploads/B1tkq2HKxl.png) #### 2. RED ![image](https://hackmd.io/_uploads/B1_pq2HFel.png) CHECK LSB ![image](https://hackmd.io/_uploads/rJrOjhBtlx.png) #### 3. Ph4nt0m 1ntrud3r ![image](https://hackmd.io/_uploads/By1F6hrYgl.png) Frame 1: bnRfdGg0dA== --> nt_th4t Frame 8: YmhfNHJfMw== --> bh_4r_3 Frame 12: NmY0YTY2Ng== --> 6f4a666 Frame 13: XzM0c3lfdA== --> _34sy_t Frame 17: ezF0X3c0cw== --> {1t_w4s Frame 20: cGljb0NURg== --> picoCTF #### 4. Verify ![image](https://hackmd.io/_uploads/S11ak6rtex.png) #### 5. DISKO 2 ![image](https://hackmd.io/_uploads/Bk81QTrtxl.png) ![image](https://hackmd.io/_uploads/HJajm6rtlx.png) #### 6. DISKO 3 ![image](https://hackmd.io/_uploads/rJPFHprFxe.png) ![image](https://hackmd.io/_uploads/SkCpBTrYlx.png) #### 7. St3g0 ![image](https://hackmd.io/_uploads/r1eqITHYee.png) #### 8. PcapPoisoning ![image](https://hackmd.io/_uploads/SyybUjcYlx.png) #### 9. Packets Primer ![image](https://hackmd.io/_uploads/By42Li5Fge.png) #### 10. Wireshark twoo twooo two twoo... ![image](https://hackmd.io/_uploads/rJCeOs9tex.png) ![image](https://hackmd.io/_uploads/SJmLFjctgx.png) ![image](https://hackmd.io/_uploads/BkPcYs5Kxe.png) ![image](https://hackmd.io/_uploads/S11McicYgg.png) ![image](https://hackmd.io/_uploads/SkgY9j5Kgx.png) #### 11. WebNet0 ![image](https://hackmd.io/_uploads/Sy318Iitel.png) ![image](https://hackmd.io/_uploads/SJlbPIsKle.png) ![image](https://hackmd.io/_uploads/HJVpwIjtlg.png) ![image](https://hackmd.io/_uploads/BkKW_Lsteg.png) #### 12. WebNet1 ![image](https://hackmd.io/_uploads/H1cY_UjYgg.png) ![image](https://hackmd.io/_uploads/BkFn_Ujtle.png) ![image](https://hackmd.io/_uploads/Sy56dUoYxg.png) ![image](https://hackmd.io/_uploads/HklmF8sKgl.png) #### 13. WhitePages ![image](https://hackmd.io/_uploads/SyN4o4y9eg.png) ![image](https://hackmd.io/_uploads/Hk4Hj4kcgg.png) ![image](https://hackmd.io/_uploads/ryRKiVJ9gg.png) #### 14. hideme ![image](https://hackmd.io/_uploads/HJU2NiW9ee.png) trong thư mục _flag.png.extracted có thư mục secret mở ra có flag ![image](https://hackmd.io/_uploads/BJmREob5ll.png) #### 15. Sleuthkit Intro ![image](https://hackmd.io/_uploads/ByCGbyQcxx.png) #### 16. Disk, disk, sleuth! ![image](https://hackmd.io/_uploads/H13FGyQ9ee.png) #### 17. Disk, disk, sleuth! II ![image](https://hackmd.io/_uploads/rk5sE1Q5xl.png) ![image](https://hackmd.io/_uploads/SyOCEJmclg.png) #### 18. Sleuthkit Apprentice ![image](https://hackmd.io/_uploads/ByD0hym5ge.png) #### 19. Lookey here ![image](https://hackmd.io/_uploads/S1IcuMlsee.png) ![image](https://hackmd.io/_uploads/rkLhOzgjxe.png) #### 20. MacroHard WeakEdge ![image](https://hackmd.io/_uploads/HyuJqMgsgx.png) ![image](https://hackmd.io/_uploads/Hkpeqzeoll.png) ![image](https://hackmd.io/_uploads/ByimcMxieg.png) ![image](https://hackmd.io/_uploads/SkY_5Mesge.png) ![image](https://hackmd.io/_uploads/B1ih5fgoll.png) #### 21. Redaction gone wrong ![image](https://hackmd.io/_uploads/ByiWsMlslx.png) ![image](https://hackmd.io/_uploads/Sk8QsGgsel.png) ![image](https://hackmd.io/_uploads/ByHEjGeoxe.png)