NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
A process crashed and its memory was dumped. Secrets often sit in RAM as plaintext. Download the memory dump and extract the leaked secret buried among the memory artifacts.
#forensics#memory#strings#intermediate
DifficultyMedium
Live Environment
Ready
Spin up your own private, isolated instance of this challenge.
Auto shutdown after 60 minutes
Isolated sandbox
Captured flags are saved independently of the environment
One-click restart
Submit Flag
Hints
Unlocking any hint — including free ones — forfeits the +25% no-hint solve bonus.
It is the analysis of a system's RAM capture to find running processes, network connections, credentials and malware that may not exist on disk.
How does strings help with a memory dump?
The strings command extracts readable text from binary data, which can reveal commands, URLs, passwords or flags. Filtering with grep narrows large dumps quickly.
Do I need Volatility for MemScope?
Not necessarily. The challenge is free on Codelivly and focuses on core techniques such as strings and pattern searching, a base for tools like Volatility.