Post

Sleuthkit Intro

Download the disk image and use mmls on it to find the size of the Linux partition. Connect to the remote checker service to check your answer and get the flag. Note: if you are using the webshell, download and extract the disk image into /tmp not your home directory. Access checker program: nc saturn.picoctf.net 53218

image-1642

image-1641

Run mmls disk.img to inspect the partition table. The Linux partition has a Length of 202752 sectors in the screenshot; submit that value to the checker. Use the Length column rather than the Start or End column, since the question asks for the partition size in sectors. See the mmls manual


This post is licensed under CC BY 4.0 by the author.