Original Writeup: [https://github.com/crr0tz-4-d1nn3r/CTFs/tree/master/bsidesbos_2020/Forensics/Spy_Cam](https://github.com/crr0tz-4-d1nn3r/CTFs/tree/master/bsidesbos_2020/Forensics/Spy_Cam)# Spy Cam
Oh no! I found some spyware on my laptop. Can you find out what the attacker saw?
Download the file below.
[see github for file]
# Flag```shellflag{i_spy_with_my_little_eye}```
# Solution
Looking at pcap follow TCP conversation. Looks of images getting passed out. Too many to carve by hand. 
foremost for the win!```shellkali@kali:~/Desktop$ foremost capture.pcap Processing: capture.pcap|*|```
Output folder has sooo many images of a phone, with the flag scrolling across the screen.
![https://i.imgur.com/0OQCL21.jpg](http://i.imgur.com/0OQCL21.jpg)