Tags: forensics 

Rating:

challenge description : The backup of our data was somehow corrupted. Recover the data and be rewarded with a flag.

challenge hint : Try a tool a surgeon might use.

challenge file : data-backup

step by step writeup :
1- discover file type ( command file data-backup)
2- extract printable strings from file ( i notice there are some file named ( flag.png , flag.pdf ..etc)
3- extract files using binwalk command ( binwalk --dd=".*" /home/kali/Desktop/data-backup )
4- we got file type zip file BA5D3.zip
5- trying to extract files from zip file but the file was corrupt
6- using winrar tool repair archive tools > repair archive
7- got file named rebuilt.BA5D3.zip try to extract file and find out the content
8- flag was in flag.pdf file

### flag : jctf{fun_w17h_m461c_by735}