InCTF 2014 - Forensics-8 300

Given a partition needed to mount and get the flag.

root@Vijay:~/Desktop/inctf 14/forensics# file Forensics-8

Forensics-8: x86 boot sector; partition 1: ID=0xc, starthead 0, startsector 1, 97656 sectors, code offset 0xb8

root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics# gparted Forensics-8

======================

libparted : 2.3

======================

root@Vijay:~/Desktop/inctf 14/forensics# parted Forensics-8

GNU Parted 2.3

Using /root/Desktop/inctf 14/forensics/Forensics-8

Welcome to GNU Parted! Type 'help' to view a list of commands.

(parted) unit                                                            

Unit?  [compact]? B                                                      

(parted)                                                                 

(parted) print                                                           

Model:  (file)

Disk /root/Desktop/inctf 14/forensics/Forensics-8: 52428800B

Sector size (logical/physical): 512B/512B

Partition Table: msdos



Number  Start  End        Size       Type     File system  Flags

 1      512B   50000383B  49999872B  primary  fat32        lba



(parted) q                                                               

root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics# mount -o loop,ro,offset=512 Forensics-8 /mnt/forensics/
root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics#
root@Vijay:~/Desktop/inctf 14/forensics# df -h f4
Filesystem      Size  Used Avail Use% Mounted on
/dev/loop1       25M   20M  3.4M  86% /root/Desktop/inctf 14/forensics/f4
root@Vijay:~/Desktop/inctf 14/forensics# 
root@Vijay:~/Desktop/inctf 14/forensics# 
root@Vijay:~/Desktop/inctf 14/forensics# umount f4