diff options
Diffstat (limited to 'solve')
| -rw-r--r-- | solve/flag | 1 | ||||
| -rw-r--r-- | solve/intro-forensics-2.pcapng | bin | 0 -> 34584 bytes | |||
| -rwxr-xr-x | solve/solve | 12 |
3 files changed, 13 insertions, 0 deletions
diff --git a/solve/flag b/solve/flag new file mode 100644 index 0000000..f82fe59 --- /dev/null +++ b/solve/flag @@ -0,0 +1 @@ +CSCG{kn0cking_on_heavens_d000r} diff --git a/solve/intro-forensics-2.pcapng b/solve/intro-forensics-2.pcapng Binary files differnew file mode 100644 index 0000000..2c10651 --- /dev/null +++ b/solve/intro-forensics-2.pcapng diff --git a/solve/solve b/solve/solve new file mode 100755 index 0000000..5365871 --- /dev/null +++ b/solve/solve @@ -0,0 +1,12 @@ +#!/usr/bin/env python3 + +from base64 import b64decode +import subprocess +import requests +import re + +packet_filter = "ip.src_host == 192.168.178.21 && ip.dst_host == 45.142.177.160 && tcp.flags.syn == 1" +cmd = f"tshark -nr intro-forensics-2.pcapng -Y '{packet_filter}' -T fields -e tcp.dstport" +ports = subprocess.check_output(cmd, shell=True).decode().split("\n") +ports = b"".join([int.to_bytes(int(p), 2, "big") for p in ports if p.strip() != ""]) +print(ports.decode()) |