ICMP

8KB

icmp.pcap

Category: Steganography - Points: 500 (at the beginning) then 292 (at the end) - Difficulty: Medium - Solves: 292 Description:

Infos:

A .pcap file is provided (ICMP.pcap)

Solution: To solve this challenge you need to analyse (with Wireshark) the Info column in .pcap file. When you do that you can see there are seq elements :

Now you just need to range the seq elements in ascending order and take the id value.

When you have all elements you need to convert them in hex then Base64 : 5a485a4456455a376144466b5a475675587a46755833526f5a5638785a4830 From Hex ==> ZHZDVEZ7aDFkZGVuXzFuX3RoZV8xZH0 From Base64 ==> The flag

Or you can do the 2 steps in 1 with CyberChef :

🚩 FLAG

dvCTF{h1dden_1n_the_1d}