forensicsmedium

Fishy HTTP

hackthebox

I found a suspicious program on my computer making HTTP requests to a web server. Please review the provided traffic capture and executable file for analysis. (Note: Flag has two parts)

$ ls tags/ techniques/
custom_encodingpcapdotnethttpc2reverse_shellsteganography_in_protocol
html_tag_encodingword_based_base64_encodingc2_traffic_analysisdotnet_decompilationprotocol_reverse_engineering
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]