forensicseasy

Baby Exfil

uoftctf2026

Task: Analyze pcap file with captured network traffic to find exfiltrated data. Solution: Extract HTTP objects, find XOR encryption key in downloaded Python script, decrypt hex-encoded files to recover images containing the flag.

$ ls tags/ techniques/
xor_decryptionpcap_analysishttp_object_extractionmultipart_parsing

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]