Forensics Level 4 75 points

Decrypt TLS-Encrypted HTTPS Traffic

Mission

Analyze a safe TLS-forensics fixture. traffic.pcap is a text representation of one TLS application-data capture and sslkeylog.txt is its key-log record. Do not intercept live traffic; recover the flag from the recorded decrypted payload.

#forensics#tls#https#wireshark#decryption

Clear it in 3 steps

Not started
  1. Start the environment

  2. Investigate the target

  3. Submit the flag