In this video walk-through, we covered navigating directories and searching through files with Powershell. This was part of Day 20 of Advent of Cyber 2.

Someone is mischievous at The Best Festival Company. The contents within the stockings have been removed. A clue was left in one of the stockings that hints that the contents have been hidden within Elfstation1. McEager moves quickly and attempts to RDP into the machine. Yikes! He is unable to log in.

Get OSCP Certificate Notes

Room Answers

Search for the first hidden elf file within the Documents folder. Read the contents of this file. What does Elf 1 want?

Search on the desktop for a hidden folder that contains the file for Elf 2. Read the contents of this file. What is the name of that movie that Elf 2 wants?

Search the Windows directory for a hidden folder that contains files for Elf 3. What is the name of the hidden folder? (This command will take a while)

How many words does the first file contain?

What 2 words are at index 551 and 6991 in the first file?

This is only half the answer. Search in the 2nd file for the phrase from the previous question to get the full answer. What does Elf 3 want? (use spaces when submitting the answer)

Video Walk-Through


About the Author

I create cybersecurity notes, digital marketing notes and online courses. I also provide digital marketing consulting including but not limited to SEO, Google & Meta ads and CRM administration.

View Articles