Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Network Analysis - SMB Share Enumeration Leak
Mission
An attacker enumerating SMB shares on the network was captured. Download the packet capture (traffic.pcap), follow the SMB (TCP/445) traffic, and extract the flag leaked in a file listing/read.
Not started
Hints
Hint 1Show
Follow the SMB (TCP/445) traffic in traffic.pcap; you can see share and file enumeration
Hint 2Show
The Public and backup shares are decoys; focus on credentials.txt in the IT share
Hint 3Show
Extract tcp.payload and read the strings; the flag is inside the READ Response