forensicsProeasy

Baby Exfil

uoftctf2026

Task: Analyze pcap file with captured network traffic to find exfiltrated data. Solution: Extract HTTP objects, find XOR encryption key in downloaded Python script, decrypt hex-encoded files to recover images containing the flag.

$ ls tags/ techniques/
xor_decryptionpcap_analysishttp_object_extractionmultipart_parsing

๐Ÿ”’

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups