NetworkingLesson + challengeFree

Crossed Wires

Follow the stream and pull the loot back off the wire.

A workstation on the finance VLAN uploaded something it shouldn't have. You have the capture. Reassemble the TCP stream, pull the exfiltrated object back off the wire, and read what left the building.

Difficulty
Medium
Estimated time
40 min
Points
225 pts
Completions
Completed by 1 player
Authors
By Cyber Academy 4 U

What you will learn

  • Navigate a packet capture and follow a single TCP conversation
  • Reconstruct an application-layer payload from reassembled segments
  • Export an uploaded HTTP object and recognise it is compressed
  • Decompress a carved object to recover exfiltrated data (and ignore a decoy)

What is inside

  1. Task 1 · Crossed Wires1 question

Sign in to read the tasks, start the machine and answer the questions.