Best Router
http://forensics.chal.csaw.io:3287
NOTE: This will expand to ~16GB!
19:00 Eastern: updated. Old flags have been removed.
Forensics challenge we have an img with 16GB, and an online service at http://forensics.chal.csaw.io:3287, the service asks for a username and a password so we guessed we need to find them in the img, so lets use autopsy to search in the linux filesystem for filenames that contain the word flag:
As we can see we can found a /var/www/flag.txt unfortunately the file is empty, but we have the files of the web service of the link provided!
Checking the username.txt and password.txt we can see that we have the username and password!
After using the credentials on the web page we got the flag!