![BelkaCTF#6 - [5] Username(Baby, 100)](/_next/image?url=https%3A%2F%2Fwww.notion.so%2Fimage%2Fhttps%253A%252F%252Fbelkasoft.com%252Fbelkactf6%252Fassets%252Fimg%252Fpanels%252F5_7aabd0e060fb6bc4e037d60694f18cba.png%3Ftable%3Dblock%26id%3D95bcfbf7-9498-4d1d-81e7-f8a6b471f3f8%26cache%3Dv2&w=3840&q=75)
d2n0s4ur
I figured I'd hold onto the good news and keep it under wraps from the Chief... for the time being, at least. Opening the image of laptop seized Phorger's house in Belkasoft X, I delved into the investigation.
Time to start from scratch, as usual…
Q. What is the username of the laptop user?
Extract your
BelkaCTF_6_CASE240405_FILE2.zipwith this password:
RJtWAZfsB1wMCNDebVWY
Solve
Used Tool
- Autopsy
By using Autopsy, you can see OS Accounts
Answer: phorger