capture the flag, hacking

PicoCTF 2017 – Digital Camouflage

Another day, another challenge.

Today’s blog post we will be solving the “Digital Camouflage” challenge in the PicoCTF.

Let’s start.

Clicking on the challenge we see the following:

PicoCTF_Digital_Camouflage_1

We need to find the password in a packet capture.

Let’s look at the hints to see what we can find.

PicoCTF_Digital_Camouflage_2

Downloading the file and going to Wireshark we see the following:

PicoCTF_Digital_Camouflage_6

We see network traffic. The first half is UDP packets which is not important for this challenge.

Scrolling down we see the following:

PicoCTF_Digital_Camouflage_5

Looking at this packet we see a username, and password. Could this be what we’re looking for?

Doing a right click, follow, HTTP Stream we see:

PicoCTF_Digital_Camouflage_4

Entering the password into the input box we retrieved the flag and acquired 50 points.