Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Find Password in Packet Capture
Mission
Clear-text HTTP traffic from a shop's internal network was captured. Among many requests, exactly one is the administrator's login attempt. Analyze the packet capture (traffic.pcap) and extract the administrator (username=admin) password. The password is the flag.
Hints
Hint 1 Show
Filter with http.request.method == "POST" to see only POSTs
Hint 2 Show
There are several POSTs to /login; the one with username=admin is the target
Hint 3 Show
tshark -r traffic.pcap -Y 'http.request.uri=="/login"' -T fields -e http.file_data