FE01 - 100pts

Briefing

Download the file and find a way to get the flag. Contents: fe01.ost

Challenge Files:

We can run file fe01.ost to determine that fe01.ost is a Microsoft Outlook email folder.
Searching online for a program that can read this identifies pffexport, which can be installed with sudo apt install pff-tools.
We can extract the content with pffexport fe01.ost and cd into fe01.ost.export.
Run find . -type d -empty -delete in fe01.ost.export to delete all empty directories.
Searching the folder for flag shows that Root - Mailbox/IPM_SUBTREE/Inbox/Message00018/Attachments has a ZIP file called 1_flag.zip (as an attachment to the Message00018 email) that is password protected.
Looking around some more reveals that the calendar contains the key. Root - Mailbox/IPM_SUBTREE/Calendar/Appointment00001/Appointment.txt has the name c]5p@S7K/z}Z!Q - 11am meeting with Chris so c]5p@S7K/z}Z!Q is the password.
Extracting the 1_flag.zip with c]5p@S7K/z}Z!Q as the password shows an image flag.jpg with the flag in it.

pst_i'm_in_here!

Last updated 2 years ago