Day 5

This room is a brief introduction to DOS (Disk Operating System) environment.

Learning Objectives

  • Experience how to navigate an unfamiliar legacy system.

  • Learn about DOS and its connection to its contemporary, the Windows Command Prompt.

  • Discover the significance of file signatures and magic bytes in data recovery and file system analysis.

The room is vrey straight foward like the previous ones and the commands are given to us.

How large (in bytes) is the AC2023.BAK file?
Just type dir and enter.

This will give us the size of the file AC2023.BAK.

What is the name of the backup program?
If you go to C:\TOOLS\BACKUP and open the README.TXT it will give you the name of the backup program
What should the correct bytes be in the backup's file signature to restore the backup properly?
If you open AC2023.BAK with EDIT AC2023.BAK you will find it's magic number is different than the one specified in bakup program's troubleshooting section. 
What is the flag after restoring the backup successfully?
The magic number is in hexadecimal format which needs to be converted to ASCII representation. Once this has been fixed and AC2023.BAK is edited we can run it and it will give us the flag.

Last updated

Was this helpful?