[Sharif University CTF 2016] [Forensic 100 – Dumped!] Write UpDescription
In Windows Task Manager, I right clicked a process and selected “Create dump file”. I’ll give you the dump, but in return, give me the flag!
Resolution
Looking for Sharif in the dump:
1 2 3 4 5 6 7 8 | $ strings RunMe.DMP | grep 'Sharif'00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000SharifCTF{4d7328869acb371ede596d73ce0a9af8}SharifCTF{4dSharifCTF{4d7328869acb371ede596d73ce0a9af8}SharifCTF{4dSharifCTF{4d7328869acb371ede596d73ce0a9af8} |
Flag was “4d7328869acb371ede596d73ce0a9af8“.