diff --git a/images/PXL_20220920_141456208.jpg b/images/PXL_20220920_141456208.jpg new file mode 100644 index 0000000..1436798 Binary files /dev/null and b/images/PXL_20220920_141456208.jpg differ diff --git a/presentation.md b/presentation.md index 82d798c..804eef6 100644 --- a/presentation.md +++ b/presentation.md @@ -1,6 +1,6 @@ --- -title: Forenzika -author: Spagnolo Gasper +title: FRIctf{forenzika} +author: DragonSec patat: eval: figlet: @@ -8,15 +8,50 @@ patat: fragment: false replace: true --- + ```figlet -Forenzika +KAJ JE FORENZIKA ? +``` +* Stenografija +* Analiza "memory dumpov" +* Analiza tcp/udp paketov + +Basically vse kjer je potrebno izlusciti neko skrito informacijo. + +--- + +```figlet +FORENSICS == STRINGS & GREP :-) ``` --- +```figlet +ANALIZA SLIK +``` -Things I like: +* Najprej si oglejmo sliko +```bash +feh images/PXL_20220920_141456208.jpg +``` -- Markdown -- Haskell -- Pandoc +```bash +# Poglejmo drobovje slike +hexdump -C images/PXL_20220920_141456208.jpg +# ... :) +strings images/PXL_20220920_141456208.jpg | grep ctf +``` +[jpg-kodiranje](https://en.wikipedia.org/wiki/JPEG#Syntax_and_structure) + +--- +```figlet +EXIFTOOL +``` + +* Orodje, ki izlusci vse informacije, ki jih slika/video/gif hrani. + +```bash +exiftool images/PXL_20220920_141456208.jpg +exiftool images/PXL_20220920_141456208.jpg | grep -i date +exiftool images/PXL_20220920_141456208.jpg | grep -i comment +```