Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Network Analysis - SMB Share Enumeration Leak
Mission
An attacker enumerating SMB shares on the network was captured. Download the packet capture (traffic.pcap), follow the SMB (TCP/445) traffic, and extract the flag leaked in a file listing/read.
Hints
Hint 1 Show
Follow the SMB (TCP/445) traffic in traffic.pcap; you can see share and file enumeration
Hint 2 Show
The Public and backup shares are decoys; focus on credentials.txt in the IT share
Hint 3 Show
Extract tcp.payload and read the strings; the flag is inside the READ Response