Forensics StartMe Updates (2/1/2025)

Skip to main content

Search This Blog

Forensics StartMe Updates (2/1/2025)

Posted by Kevin Pagano February 01, 2025

Get link
Facebook
X
Pinterest
Email
Other Apps

Shortlink: startme.stark4n6.com

QR Code:

If people have suggestions for additions please feel free to shoot me a message on the app formerly known as X/Twitter (@KevinPagano3) or Bluesky.

Blog Feed

Digital Forensics with Damien

Know Your Adversary - Oleg Skulkin

ogmini - Exploration of DFIR

Cipher & Decoding Tools

Image Hidden Text

Forensic Tools

PowerShell tools to help defenders hunt smarter, hunt harder

Other Cheat Sheets

Belkasoft Mobile Forensics Cheatsheet

Podcasts

InfoSec Deep Dive

Surviving the Breach with David Cowen and Erik Harssema

Test / CTF Images

DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital Forensics, Incident Response, Malware Analysis and Threat Hunting

Useful Links

s0cm0nkey's Security Reference Guide - All of the Best Links and Resources on Cyber Security

StartMe updates

Get link
Facebook
X
Pinterest
Email
Other Apps

Archive

February 20251
January 20252
December 20242
October 20241
May 20241
April 20242
March 20244
February 20241
January 20243
December 20231

Show more Show less

Popular Posts

StartMe Up (Forensic Edition)

As part of my own benefit I created a Start.Me page for a bunch of FOSS forensic tools and utilities that I currently have in my toolkit. I've also included RSS feeds for blogs I follow as well as YouTube channels and some other links to sites I frequent. You can access it at startme.stark4n6.com or preview it below (embedding on Blogger isn't the best). If anyone has suggestions on more items to add or links please feel free to reach out to me on Twitter @KevinPagano3 . *Cues The Rolling Stones*

Cellebrite CTF 2021 - Heisenberg's Android

Cellebrite is back with another CTF competition and this year's takes it up a notch. I want to start by giving major props to Heather, Paul, Ronen, Sahil and Ian for putting on a great competition . Now lets get started with the walkthroughs. First up, is the Samsung Note 10 owned by "Heisenberg". Evidence : https://d17k3c8pvtyk2s.cloudfront.net/CTF21/CTF21_Heisenberg_SM-N970U1_QualcommLive_2021-07-22.zip Password : 02DB2ECE91DB67E8FA939FC3DC15D16B Device Identification (10 points) What is the Bluetooth MAC Address of the first vehicle Heisenberg's Android connected to? Pulled from the file at the following path: Dump\data\misc\bluedroid\bt_config.conf We get bluetooth connections which we can easily see in the ALEAPP report below that the answer was " 34:C7:31:F8:61:3B ". Figure 1: Bluetooth connections report in ALEAPP Application Analysis (10 Points) Which website did Heisenburg look for guidance on how to mount a USB drive on his phone? (The answer sh...

Magnet Virtual Summit 2024 CTF - Android

Cipher | iOS Now for the last section, the Android phone. Evidence: Google Pixel 3a XL Logical Image - Data.tar | Facebook Return Press x to Respawn On what platform did Rocco share his Call of Duty Username? I switched over to Conversation view to possibly narrow the scope to just communications. Out of Android Messages, SMS, Discord, Facebook, and Twitter, Twitter was the winning application. In the DMs Rocco sends his username to Chadwick. Figure 1: Twitter DMs in AXIOM Warm Up What Southern state's sports team did Rocco search up? In Chrome search history, Rocco looked for " ragin cajuns football record". Figure 2: Chrome search history in ALEAPP The results lead to the Louisiana Rajin Cajuns. Figure 3: Search for "ragin cajuns" Source path: Google Pixel 3a XL Logical Image - Data.tar\data\data\com.android.chrome\app_chrome\Default\History Can you Handle this What was Rocco's Twitter account name? From the Twitter DMs above we could see that his Twi...

© 2021 STARK 4N6

Powered by Blogger