April 14, 2022
UMDCTF 2022 Renzik's Case
This challenge provided us with a 2GB large file called "usb.img". The challenge description was talking about "deleted documents" which indicates that file recovery is the solution here. Downloading the file was the longest part in this challenge by the way ^^.
Linux Disk Internals 🙏👌
Immediately I used my beloved file recovery tool called Linux Disk Internals to search for files in the image. As no files could be found on the file, I tried to recover them by their signature.
The tool was able to recover a total of 12 files, including a picture that has the flag on it!