Points: 300

Tags: memdump forensics 

Poll rating:

Mr. Huxley has been suspected for every cybercrime we have a law for. LEA agents seized his laptop and made a copy of its RAM while the machine was still active. However, Huxley had hidden inside its laptop an EMP device that was triggered while the agents were trying to seize the hard drive. The drive got destroyed, nothing useful has been found from the RAM dump. Getting at least Huxley's passwords would be very helpful to the agents.

The challenge is available at http://static.quals.nuitduhack.com/memdump.zip

Solves: 6

You need to authenticate and join a team to post writeups