Flag in Windows - Rank and File Module

Hey, I was doing the Rank and File Module in IT and Cybersecurity Pathway. I was able to find the Linux flag but even after spending a lot of time on windows, not able to find the flag.
Can anyone give some hint? It would be very helpful. I have attached the task for your reference.
Thanks in advance.

So first, find out where Windows stores “Performance Monitor” data. Google should work :slight_smile: Next, find the flag file in that directory. Then, use alternate data streams to get the flag itself.

Thanks. I was able to find the flag :smile:

1 Like

How did you find the flag?

In linux. If i try to open the directory using ls it says access denied

You are talking about the flag in Windows or Linux?

not to resurrect this dead log but im having a ton of trouble finding the linux flag for this module. anyone able to help me out at all?

Hello please who was able to see the flag in windows i got a secret.txt and i dont know how to open it

@josephwhite I only saw secret.txt but i cant bet the answer and for the linux i have searched all the /home/ directory i cant get the flagi have searched all the directories i could but got nothing please kindly help out

There is a directory name “Flag” → Ctrl+H will show hidden files.

You can also go through command line: sudo -i or sudo su should allow you to act as a superuser without a password. Navitgate to the “Flag” directory. “ls -a” should show the file. You’ll need to move the file for it to become unhidden then open it.

bro i wasnt able to get the flag please help me

I was looking and can’t find the flag in windows. I can’t find the alternate data in command prompt either. I tried the dir /a:h and found the secret.txt but nothing else comes up. I have tried the alternate stream but nothing seems to work.

There is a different parameter beside dir /a:h in the dir command for display of alternate streams. Try to execute dir /? to get a list of all supported parameters and execute it using cmd in the directory where the secret.txt is located.

1 Like

Thanks. It took me a few tries but I found it. I was typing in the right name just had to make sure I put in my > bracket

1 Like

Hey I’m not able to find the flag for windows I have found it for Linux but not windows. I see the text document secret and it just asks me a question i am stuck

First, find out where Windows stores “Performance Monitor” data (Core Concepts) and find the flag file in that directory.

Then, use alternate data streams to get the flag itself ( Steps 30 - 38).

When I type in cd %HOMEPATH% I just get an error

Try typing “cmd” and hitting Enter to convert from PowerShell to a Command Interpreter. Then the environment variables will have meaning.

This has no bearing on solving the challenge though :slight_smile: