April 14, 2022

UMDCTF 2022 Renzik's Case

This challenge provided us with a 2GB large file called "usb.img". The challenge description was talking about "deleted documents" which indicates that file recovery is the solution here. Downloading the file was the longest part in this challenge by the way ^^.

Linux Disk Internals 🙏👌

Immediately I used my beloved file recovery tool called Linux Disk Internals to search for files in the image. As no files could be found on the file, I tried to recover them by their signature.

The tool was able to recover a total of 12 files, including a picture that has the flag on it!