Tags: grep 

Rating:

**Description**

> Simple Recovery Try to recover the data from these RAID 5 images!

**Files provided**

- [`disk.img0.7z`](https://github.com/Aurel300/empirectf/blob/master/writeups/2018-09-14-CSAW-CTF-Quals/files/simple_recovery-disk.img0.7z)
- [`disk.img1.7z`](https://github.com/Aurel300/empirectf/blob/master/writeups/2018-09-14-CSAW-CTF-Quals/files/simple_recovery-disk.img1.7z)

**Solution**

After extraction, we can check if the flag is hidden in plain text:

$ strings disk.* | grep "flag{"
<photoshop:LayerName>flag{dis_week_evry_week_dnt_be_securty_weak}</photoshop:LayerName>
<photoshop:LayerText>flag{dis_week_evry_week_dnt_be_securty_weak}

Original writeup (https://github.com/Aurel300/empirectf/blob/master/writeups/2018-09-14-CSAW-CTF-Quals/README.md#150-forensics--simple_recovery).