$ ctf42

Deleted_Message

Forensics No technique tags yet.
Difficulty Not rated yet

Flag format: UCTF{...}

Cyber Police have seized a computer containing illegal content, but the data stored is secured with a password.

A member of the criminal organization owning the computer was arrested. Police suspect that the password was sent to the criminal via SMS, but the message was deleted right before the arrest.

You’re given a dump of the data partition of the phone (running Android 6.0). Your job as the forensic specialist is to recover the deleted password.

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.