Root-Me on MOZAhttps://moza369.github.io/tags/root-me/Recent content in Root-Me on MOZAHugoen-usSun, 16 Mar 2025 00:00:00 +0000Root-me — Master keehttps://moza369.github.io/ctfs/root-me_masterkee/Sun, 16 Mar 2025 00:00:00 +0000https://moza369.github.io/ctfs/root-me_masterkee/<h2 id="challenge-info">Challenge Info</h2> <ul> <li><strong>Platform:</strong> root-me</li> <li><strong>Category:</strong> Forensics</li> <li><strong>Difficulty:</strong> Medium</li> <li><strong>Points:</strong> 15</li> <li><strong>Link:</strong> <a href="https://www.root-me.org/en/Challenges/Forensic/MasterKee">MasterKee</a></li> </ul> <hr> <h1 id="cracking-the-masterkee-challenge-exploiting-cve-2023-32784">Cracking the MasterKee Challenge: Exploiting CVE-2023-32784</h1> <p>For this challenge, we are provided with two files:</p> <ul> <li><code>MasterKee.DMP</code></li> <li><code>Masterkee.kdbx</code></li> </ul> <p>The goal is to extract the password from the <code>.DMP</code> file and use it to unlock the KeePass database (<code>Masterkee.kdbx</code>).</p> <p>After some research, I discovered that a specific version of KeePass is vulnerable to <strong>CVE-2023-32784</strong>, which allows extracting the master password from a memory dump.</p>Root-me — Oh My Grubhttps://moza369.github.io/ctfs/root-me_ohmygrub/Tue, 11 Mar 2025 00:00:00 +0000https://moza369.github.io/ctfs/root-me_ohmygrub/<h2 id="challenge-info">Challenge Info</h2> <ul> <li><strong>Platform:</strong> root-me</li> <li><strong>Category:</strong> Forensics</li> <li><strong>Difficulty:</strong> Medium</li> <li><strong>Points:</strong> 15</li> <li><strong>Link:</strong> <a href="https://www.root-me.org/en/Challenges/Forensic/Oh-My-Grub">Oh-My-Grub</a></li> </ul> <hr> <h1 id="analyzing-an-ova-file-to-retrieve-login-credentials">Analyzing an OVA File to Retrieve Login Credentials</h1> <p>In this challenge, we are given an OVA (Open Virtualization Appliance) file. The goal is to analyze the file and retrieve the login credentials required to access the virtual machine. Here&rsquo;s how I approached the problem:</p> <hr> <h2 id="step-1-extracting-files-from-the-ova-file">Step 1: Extracting Files from the OVA File</h2> <p>The OVA file is essentially a tarball, so we can extract its contents using the <code>tar</code> command:</p>