Skip to content

Ph4nt0m 1ntrud3r

Open the pcap file in Wireshark \ Hint 2: Attacks were done in timely manner.

Sort the packets by time. Decoding (base64) the TCP payload of the last few packets give the pieces of the flag