I was provided with a "challenge" forensics image of 2MB in size (floppy); they provide the disk image and want you to uncover as many passwords as you can find. I downloaded the image and
dd'd it to a thumbdrive. The only thing visible was a text file, which contained a password.
I knew there had to be more, so I used an undelete utility and found 2 deleted files. First there was another text file with a password - easy. The other was a .pst file which I mounted into Outlook. There were some emails with passwords, as well as an email with an image. Another email has a link to a steganography site.
Obviously, there was a file hidden in the image, so I went to the website and downloaded the steganographic decoder.I had to try some of the passwords I had found to get the file to decrypt, and sure enough, there was another text file with a password. I called it a day at that point.
Did I miss any other methods?