Do_Not_Redeem_5

savsch

Can you determine the https GET endpoint where the scammer logs their victims' sms messages? The scammer took a lot of steps in hiding the endpoint, maybe they're afraid of getting caught... Wrap your answer within KashiCTF{ and }. Footnotes

As with other challenges in this series, solving previous challenges, although not required, will be of great help.

Download kitler's-phone.tar.gz : Use the same file as in the challenge description of forensics/Do Not Redeem #1