Offensive securityIntermediateFree + Premium rooms
Network & Protocol Analysis
Read what travels on the wire — and what tries to sneak out over it.
- Estimated time
- 1 hour
- Rooms
- 2 rooms
- Points
- 500 pts
- Enrolled
- Be the first to enroll
About this path
Before you can attack or defend a network you have to read it. This path builds packet- and protocol-literacy: following a conversation through a capture, recognising when a legitimate protocol is being abused as a covert channel, and rebuilding the data that left a network. It pairs naturally with both the offensive and the blue-team tracks.
Who should start here
Learners who want to be comfortable inside a packet capture and understand how data moves — and hides — across a network, whether their goal is testing or defending it.
Prerequisites
Basic networking concepts (DNS, TCP/IP) and willingness to use a tool such as Wireshark. The Pre-Security path is a good starting point.
What you will be able to do
- Navigate a packet capture and follow a single conversation
- Recognise protocol abuse and covert channels (e.g. DNS tunnelling)
- Reassemble exfiltrated data from out-of-order fragments
- Reason about which protocols defenders tend not to inspect
Curriculum
Module 1 — Protocol abuse & exfiltration0 of 2 rooms complete
Hiding data in ordinary traffic.