Ulli Weichert/ April 5, 2022/ IT-Security, Write-Ups/ 0Kommentare

Packets Primer

Description

Download the packet capture file and use packet analysis software to find the flag.

• Download packet capture

Solving

1. We got a pcap file... lets look into it...
2. First lets check for low hanging fruits... with strings - ah there is the flag 🙂
3. The flag is in plainsight!
4. Just remove the whitespaces
5. You can use tr -d ' ' to remove the whitespaces

#!/bin/bash

echo "Getting flag from pcap file..."

strings network-dump.flag.pcap | grep "p i c o"| tr -d ' '