Media Summary: Grab RSA private key from JPEG comment and decrypt a file with it. Uses Sleuth Kit from SANS SIFT Workstation (you can download separately and not use a VM) to create a timeline and then view ... Use pwntools to read symbols from ELF file and send function addresses to server.
Pico2026 Gatekeeper - Detailed Analysis & Overview
Grab RSA private key from JPEG comment and decrypt a file with it. Uses Sleuth Kit from SANS SIFT Workstation (you can download separately and not use a VM) to create a timeline and then view ... Use pwntools to read symbols from ELF file and send function addresses to server. Answer questions about a vulnerable program with a stack buffer overflow. Use cast to access methods of an Etherium contract. Get encrypted exfiltrated data from a PCAP file, then use CyberChef to XOR decode it.
Unpack an executable with upx (don't snap install upx, instead apt-get install upx-ucl), reverse engineering in Ghidra, then use ... malloc allocates blocks of memory contiguously and sequentially. Uses fls and mactime to create a forensic timeline. icat allows us to view the contents of the identified file.
