Official Investigator Discussion

HTB Content Challenges
1

Official discussion thread for Investigator. Please do not post any spoilers or big hints.

2

Any clue ? Basic Knowledge required? I mean, I find what i want, but, not sure what to do with it

3

I found flag, but it is not accepted and it is not 100% compatible with flag format ( contains some additional spaces). I tried to modify it a little bit to match flag format but no success.

1 Like
6

I finally got it, manipulation is pretty simple.

Knowledge you will need to learn, i mean you will learn during that challenge.

Where and how lockscreen password are stored in android.
Recognize hashes and crack them.
Extract a android back up file.
Find how and where backup encrypted file are stored for the specific app.

If you have any question feel free to dm !

3 Likes
8

Nice challenge, thanks @Onibi and @aris for their helps about cracking tool :slight_smile:

9

Nice challenge, thanks InFeRnOo !

10

nice challenge! message if you need help

11

I have the same situation as keeper772. Don’t know what I must do with it.

13

Solved!

I will share the tricks:

  1. You need to understand how passwords are stored in Android (device_policies.xml).
  2. If you use Hashcat, remember to change the mask (you need to).
  3. For the app that contains the flag, you can find a tool on GitHub :wink:

PM me :wink: