Kinoco Hacker Hands-on security practice
All challenges In progress
Forensics Level 3 50 points

Recover Executed Commands from Memory

Mission

Analyze the memory-string record `memdump.txt` to recover the executed command history. Decode the Base64 strings and read the flag from the arguments of the suspicious command piped into bash.

#forensics#memory#volatility#commands#bash

Clear it in 3 steps

Not started

  1. Start the environment

  2. Investigate the target

    Available after the environment starts

  3. Submit the flag