Sometimes in forensics, we run into files that have odd or unknown file extensions. In these cases, it's helpful to look at some of the file format signatures to figure out what they are. We use something called "magic bytes" which are the first few bytes of a file.
What is the ASCII representation of the magic bytes for a VMDK file? The flag format will be 3-4 letters (there are two correct answers).
Action | Rating | Author team |
---|---|---|
Read writeup |
4.0
|
Try A9ain |
Read writeup |
5.0
|
Team 23 |
Read writeup |
4.5
|
R0GU3_H4CK |