← Back to HWJ CTF

VIRTUALLY IMPOSSIBLE

Extract VMDK disk image from OVA archive and extract hidden host entry from /etc/hosts.

Tools Used

tar7zVirtual Disk Inspection

Overview

An OVA virtual machine appliance is provided. We need to extract the underlying disk image and search for host resolution clues.

Reconnaissance

Extract challenge.ova using tar to obtain challengeeeww-disk001.vmdk.

Exploitation Strategy

Extract etc/hosts from VMDK using 7z. The file contains #flag ----> y0u_g0t_1t_c0rr3ct.

Solution Code

tar -xf challenge.ova
7z e challengeeeww-disk001.vmdk etc/hosts
cat hosts
# Flag: hwj{y0u_g0t_1t_c0rr3ct}

Flag

hwj{y0u_g0t_1t_c0rr3ct}