How to calculate the MD5 of a single block using sleuth kit
by Jossie from LinuxQuestions.org on (#4V2HS)
I have a problem which I must solve to get me to the next question as the answer provides a password to unlock the next question.
I have to identify a file's last cluster entry and then calculate the last clusters MD5 which will act as the password to unlock the next question.
I have used
istat -o 2048 <image.raw.000> <inode entry>
this has identified the last cluster as 123110 - I have then ran the blkcat command on this to stream the file and piped it to md5suns to give me the hash value.
blkcat -o 2048 <image.raw.000> 123110 | md5sum
This generates a hash value but this doesnt unlock the file - am I doing anything wrong? i.e. not calculating the MD5 correctly - any further suggestions?
I have to identify a file's last cluster entry and then calculate the last clusters MD5 which will act as the password to unlock the next question.
I have used
istat -o 2048 <image.raw.000> <inode entry>
this has identified the last cluster as 123110 - I have then ran the blkcat command on this to stream the file and piped it to md5suns to give me the hash value.
blkcat -o 2048 <image.raw.000> 123110 | md5sum
This generates a hash value but this doesnt unlock the file - am I doing anything wrong? i.e. not calculating the MD5 correctly - any further suggestions?