File Carving from Raw Disk
forensics · medium · +45 XP
Target
GET /api/lab/disk-carve-101/disk?start=...&len=... (read raw bytes from the disk image)
POST /api/lab/disk-carve-101/submit body {offset, length, filetype}
Goal: the disk is 4096 bytes. One region starts with FFD8FFE0 (JPEG SOI) and ends with FFD9 (EOI). Find the offset + length and submit {offset, length, filetype:'jpeg'}.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/disk-carve-101/
// reuse on the cli
// submit flag
// no solves yet
5 of 13 · forensics