forensicsPromedium
Офисный Хакер (Office Hacker)
duckerz
Task: Analyze pcap file with apparent DNS exfiltration traffic to find hidden data. Solution: Ignore the DNS red herring and extract flag parts embedded in pcap file structure at specific offsets using strings and hex analysis.
$ ls tags/ techniques/
pcap_structure_analysisoffset_extractionstring_searchhex_analysis
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [forensics][Pro]Офисный трафик (Office Traffic)— duckerz
- [forensics][Pro]Сверхсекретный Шпион— duckerz
- [forensics][Pro]Синий иней (Blue Frost)— duckerz
- [forensics][Pro]Новый сотрудник (New Employee)— hackerlab
- [forensics][Pro]Зашифрованный трафик (Encrypted Traffic)— hackerlab