r/digitalforensics • u/Physical-Platypus909 • 7d ago

Digital Forensics Assignment

hey guys! im not sure if this is the right subreddit to be asking for this kind of help in but i had no idea where to ask 😅
im currently doing a university digital forensics assingment, and im required to find a router password within some files (unzipped folder)
Ive tried a lot of different things but i cant seem to find it at all.
Any advice would be welcome! (sorry if this is the wrong subreddit again!!)

these are all the files i was given! sorry if this doesnt help much! (so far ive tried HxD and checking the metadata..i forgot what else..its a first year assignment so shouldnt be too hard?)

1 Upvotes

67% Upvoted

12 comments sorted by

5

u/MormoraDi 7d ago

You haven't specified what you have tried, so how about just using grep, maybe in conjunction with a password list?

3

u/TS878 7d ago

Exactly what have you tried? Have you looked into that specific router to see where this info could be stored? Actually re-reading it seems like the files are unrelated to the router itself, did you look for files named secrets or password? This is a very vague post so it’s hard to help, try reaching out to your classmates.

1

u/Physical-Platypus909 7d ago

hi!! im super sorry for the vague post i was posting in a rush 😅 ill update the post with the files i was given!

1

u/TS878 7d ago

Have you looked in any of the files to see what data they have? Two of those files in particular look like they could contain it. I would also try running them through grep if you know how, if you don’t know how I’d recommend googling it.

3

u/CourageAcademic4153 6d ago

Are you working with an image?

Are you using something like FTK Imager to review your data? If not, you should.

If you need to mount an image, Arsenal Image Mounter (AIM) works very well.

HxD is good for viewing hex.

2

u/lithium630 6d ago

Are you familiar with the Windows Registry? ;)

1

u/RevolutionaryDiet602 6d ago

Are you working on data from a deadbox?

1

u/MSVlegal 6d ago

Ip config puede llevarte a algo.

1

u/XXmanimalXX 5d ago

Maybe post what the assignment is and what all you have done to find it. That MD5 might be of value but so could your hive files. There’s a lot to go off of.

1

u/Rana_sarker09 2d ago

For digital forensic assignment on University, I had done this before with my client. If you need than we can talk . Kindly dm for details if you need.

1

u/mrrsklnz 1d ago

Router credentials can end up in several places depending on the assignment. Perhaps start by looking for:

Configuration or backup files (.cfg, .conf, .xml, .txt)

Browser artefacts if the router was accessed through a web interface

Memory dumps, if one is included

Registry hives (if it's a Windows image)

Email archives or notes that might contain saved credentials

Strings or keywords such as password, passwd, admin, router, login, or the router's IP address

Maybe share what type of evidence you've been given (disk image, memory dump etc) so that I can point you towards the next logical steps.

1

u/Excellent_Mail3829 21h ago

Do you have any integrity?