TryHackMe: Advent of Cyber 2023 (Day 24) You Are on the Naughty List, McGreedy

“Detective Frost-eau continues to piece the evidence together, and Tracy McGreedy is now a suspect. What’s more, the detective believes that McGreedy communicated with an accomplice.

Smartphones are now an indispensable part of our lives for most of us. We use them to communicate with friends, family members, and colleagues, browse the Internet, shop online, perform e-banking transactions, and many other things. Among other reasons, it’s because smartphones are so intertwined in our activities that they can help exonerate or convict someone of a crime.

Frost-eau suggests that Tracy’s company-owned phone be seized so that Forensic McBlue can analyse it in his lab to collect digital evidence. Because it’s company-owned, no complicated legal procedures are required.”

Q1: One of the photos contains a flag. What is it?

The materials weren’t very clear about all this from the beginning, but the image has already been completely generated and added to Autopsy by the detective, so all you have to do is open up the pre-made case for it.

After this, it’s just looking through the file system on the phone to find the flags.

For the photo flag, I went through all the image file types and clicked through until I found it.

Q2: What name does Tracy use to save Detective Frost-eau’s phone number?

She saved it as Detective Carrot-Nose, lol.

Q3: One SMS exchanged with Van Sprinkles contains a password. What is it?

If you read through the messages, McGreedy is upset she is getting demoted and says that the company “will not know peace”, then exchanges this password to Van Sprinkles to “keep safe”.

❤