Blackhat USA Bugcrowd

Wahlburger

TL;DR

We were given two SQLite files. One file is a database, and the other is a log file. There are several messages that have been archived based on the database. We can check these messages using the log file.

Solution

The archive messages started from message id 2001 to 2100

From these, we can check the logs by finding the wal string to make it easier to find the messages.

From these messages we found a couple base64 encoded message in reverse order.

Flag

FLAG{sqlite_wal_forensics_is_awesome}

Last updated