forensics CTF

[fading swift]

you using linux or windows?

[short niche]

macos

what i opeing the file with VM

(windows)

[fading swift]

I think on macos you can run stat <filename>

[short niche]

thank you so mush
gosh i just wanna to learn how you do that so fast

[fading swift]

I'm using Linux almost exclusively for over 2 years now. these CTFs are very very basic and just requires some utility commands knowledge

[short niche]

alr thanks :))))

[short niche]

ummm the thing the command shows when the file was downloaded to my pc
but i need to give the last modeifed date of the file they gave me to download

[fading swift]

doesn't it gives that as well?

[short niche]

ohhh my bad

[fading swift]

ls -l file shows modification time

[short niche]

it is

sorry

[short niche]

is there maye a diffrent way to check it cuz when i submitting the answer still telling me im wrong
i can tell this CTF kinda middle level and not beginners

i was thinking that IDA can help me but nothing

[fading swift]

IDA is an overkill and I don't think it can be used for this case since modification date and stuff are considered shadow data or whatever it's called and is stored on something called Inode (at least on Ext4)

[fading swift]

maybe wrong format?

[short niche]

umm no
they can hide the date in inside the file they really like do that to confuse ppl
or maybe something else

[fading swift]

I don't understand much in binaries but I don't think it'd make sense to hide modification date in data...

maybe we're a bit confused about the objective

run strings <filename>

[short niche]

yeah i know about strings
in this case doesn't really helping and gives random stuff

[fading swift]

can you send the link of the ctf?

[short niche]

umm this ctf is locked only for my school students
can we maybe go to dm

pls

[fading swift]

sure