WhiteHat Contest 11 – For 200 WYGINWYS (what you get is not what you see)

Hi Guys! Today i will show you got forensic 200 – What you get is not what you see 😀

You can download file at here.

Try extract and use autopsy to open it

12.PNG

Then extract file encrypt.pyc and decompiler by Easy Python Decompiler to got file encrypt.py and read it

Next step, we have to find file need decrypt.

14.PNG

Try extract file “file” (if you use “mount” in linux you only got file “file”) and use code to decrypt it and get flag

15.PNG

 

 

Leave a comment