Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Recover Deleted SQLite Records
Mission
Recover the deleted record from the SQLite database `app.db` to obtain the flag. Deleted rows persist in the freelist, so recover them with `sqlite3 app.db '.recover'` or by carving with strings.
Hints
Hint 1 Show
A SELECT will not return the deleted record; inspect the raw bytes of app.db
Hint 2 Show
SQLite does not zero deleted rows immediately, so they persist in the freelist area
Hint 3 Show
Recover the flag with strings app.db or by carving raw pages