Operation Orchid
Description
Download this disk image and find the flag.
Note: if you are using the webshell, download and extract the disk image into /tmp not your home directory.
Download compressed disk image
Solving
- Check the file type of the file via
file image - It's an image of a harddrive disk, to mount it, we need to calculate the offset.
- Calculate the offset via sector * sector size
- Now we create a directory to mount the image
mkdir test - Mount image via
sudo mount -o loop,ro,offset=210763776 disk.flag.img test - Change into the directory
- Let's look for a flag file in the mounted file directory
find . -name '*flag*' -ls - For further infos let's have a look at the bash history file from root
- Get the openssl encryption settings and decrypt
flag.txt - Decrypt the file via the following command:
openssl aes256 -d -in root/flag.txt.enc -k unbreakablepassword1234567