like1000.md

like1000

Forensics, 250 points

Description:

This .tar file got tarred alot.

Solution:

Let's extract the file:

root@kali:/media/sf_CTFs/pico/like1000# mkdir out
root@kali:/media/sf_CTFs/pico/like1000# cd out
root@kali:/media/sf_CTFs/pico/like1000/out# cp ../1000.tar .
root@kali:/media/sf_CTFs/pico/like1000/out# tar -xvf 1000.tar
999.tar
filler.txt

We got a file names 999.tar. Let's extract it:

root@kali:/media/sf_CTFs/pico/like1000/out# tar -xvf 999.tar
998.tar
filler.txt

Now we got a file names 998.tar. Let's assume that the next file will be named 997.tar and so on, and use the following script to extract the files in a loop:

#!/bin/bash

cp 1000.tar out
cd out
for ((i = 1000; i > 0; i--)); do
    if [ ! -f "$i.tar" ]; then
        break
    fi
    tar -xvf $i.tar
    rm $i.tar
done
cd ..

After running the script, we get a PNG file with the flag: picoCTF{l0t5_0f_TAR5}.