<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>.IMAGE File on Site de Nemo</title><link>https://nemodzilla.xyz/tags/.image-file/</link><description>Recent content in .IMAGE File on Site de Nemo</description><generator>Hugo -- gohugo.io</generator><language>fr</language><lastBuildDate>Sat, 02 Mar 2024 00:00:00 +0000</lastBuildDate><atom:link href="https://nemodzilla.xyz/tags/.image-file/index.xml" rel="self" type="application/rss+xml"/><item><title>Capture this [Locked]</title><link>https://nemodzilla.xyz/p/rmcapturethis/</link><pubDate>Sat, 02 Mar 2024 00:00:00 +0000</pubDate><guid>https://nemodzilla.xyz/p/rmcapturethis/</guid><description>&lt;img src="https://nemodzilla.xyz/p/rmcapturethis/assets/forensic.jpg" alt="Featured image of post Capture this [Locked]" /&gt;&lt;p&gt;&lt;a class="link" href="https://www.root-me.org/en/Challenges/Forensic/Capture-this" target="_blank" rel="noopener"
&gt;Link to the challenge&lt;/a&gt;&lt;/p&gt;
&lt;h2 id="solution"&gt;Solution
&lt;/h2&gt;
&lt;script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js"&gt;&lt;/script&gt;
&lt;div class="flag-protected"&gt;
&lt;div class="flag-locked" id="flag-1"&gt;
&lt;div class="flag-icon"&gt;🚩&lt;/div&gt;
&lt;p class="flag-hint"&gt;
Le flag est protégé par un mot de passe
&lt;/p&gt;
&lt;div class="flag-input-group"&gt;
&lt;input
type="password"
id="flag-input-1"
placeholder="Mot de passe..."
onkeydown="if(event.key==='Enter') unlockFlag('1', '3ddbc1fb4fb9bb0af6c95d6fc3ac64c49c70caddf39c417c088a970e1a9846ee', this.value)"
/&gt;
&lt;button onclick="unlockFlag('1', '3ddbc1fb4fb9bb0af6c95d6fc3ac64c49c70caddf39c417c088a970e1a9846ee', document.getElementById('flag-input-1').value)"&gt;
Déverrouiller
&lt;/button&gt;
&lt;/div&gt;
&lt;p class="flag-error" id="flag-error-1" style="display:none"&gt;
❌ Mot de passe incorrect
&lt;/p&gt;
&lt;/div&gt;
&lt;div class="flag-content" id="flag-content-1" style="display:none"&gt;
&lt;div class="flag-revealed"&gt;
&lt;span class="flag-label"&gt;🏴 Flag&lt;/span&gt;
&lt;p&gt;Autopsy -&amp;gt; New Case -&amp;gt; Disk Image -&amp;gt; \path\to\ch39\usb.image -&amp;gt; next -&amp;gt; .. -&amp;gt; finish&lt;/p&gt;
&lt;p&gt;Data Sources -&amp;gt; usb.image -&amp;gt; anonyme.png -&amp;gt; text -&amp;gt; Javier Turcot&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;javier_turcot&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;/div&gt;
&lt;script&gt;
function unlockFlag(id, expectedHash, password) {
const hash = CryptoJS.SHA256(password).toString();
if (hash === expectedHash) {
document.getElementById('flag-' + id).style.display = 'none';
document.getElementById('flag-content-' + id).style.display = 'block';
} else {
const err = document.getElementById('flag-error-' + id);
err.style.display = 'block';
setTimeout(() =&gt; err.style.display = 'none', 2000);
}
}
&lt;/script&gt;</description></item></channel></rss>