Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
`secret_disk.img` is a genuine LUKS2 container. Brute-force `wordlist.txt` to find the weak passphrase, then decrypt `flag.enc` with it to recover the flag. No mounting or privileges are required.
secret_disk.img is a real LUKS2 container; inspect its header with cryptsetup luksDump
cryptsetup open --test-passphrase verifies a passphrase without device-mapper (works unprivileged)
Brute-force wordlist.txt to find the passphrase, then decrypt flag.enc (openssl AES) with it