> For the complete documentation index, see [llms.txt](https://ctf.zeyu2001.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf.zeyu2001.com/2021/picoctf/disk-disk-sleuth-110-+-130.md).

# Disk, Disk, Sleuth! (110 + 130)

### DDS 1

`srch_strings dds1-alpine.flag.img | grep picoCTF`

![](/files/-MX2lysMqYyay61FcxgI)

### DDS 2

Note that our Linux partition offset is 2048. We will need to specify this in the `-o 2048` option subsequently.

![](/files/-MX2m0iN2gpjNUIb062G)

Find the location of the file:

![](/files/-MX2m25hGHY-LGS_WkqK)

Recover the files:

`tsk_recover -e -o 2048 dds2-alpine.flag.img extracted`

![](/files/-MX2m3k6eEE5b3XBcqTz)

Then navigate to the location (`root/down-at-the-bottom.txt`) found previously. Our flag is there.

![](/files/-MX2m6AhJHvw0T9J8ucg)