A detailed walkthrough of solving TryHackMe's 'Security Footage' CTF challenge involving digital forensics on a network capture file. The solution demonstrates extracting JPEG images from a PCAP file using the foremost tool, revealing 541 JPEG frames from what appears to be an MJPEG security camera stream. The challenge is completed by analyzing the extracted frames to find a flag written on a whiteboard in frame 229.

2m read timeFrom infosecwriteups.com
Post cover image
Table of contents
The Report Comes BackAssembling the EvidenceThere It Is

Sort: