Zone Identifier - Is your file downloaded from the internet?

Thu, 06 Oct 2022 00:00:00 +0000

Have you ever wondered, why your file is not working after downloading it from the internet? How does system know if the file is downloaded from the internet?

The answers to this is Zone.Identifiers.

What are Zone Identifiers?#

Zone Identifiers is an alternate data stream that points, from where the file came on the users’ computer.

Note: Alternate Data Streams are included with files on WIndows. This is typically the case with downloaded and blocked files.

Anonymous Challenge Write-Up: WinjaCTF c0c0n 2021

Mon, 15 Nov 2021 00:00:00 +0000

WinjaCTF at c0c0n [2021]: I developed an easy challenge - called “Anonymous” - the challenge was based upon browser forensics.

TL;DR#

Intended Way - Download the zip > Extract it > Navigate the Linux directory structure > To find a directory called .config > google-chrome > Default > Open the History File in SQL Browser > Search for URLs and upon up the URL to get a file with the name - formatted like flag.

Digital-Forensics on krash.dev

Zone Identifier - Is your file downloaded from the internet?

What are Zone Identifiers?#

Anonymous Challenge Write-Up: WinjaCTF c0c0n 2021

TL;DR#