Loading
A junior admin at Vidyapeeth College logged in to the campus router over plain HTTP, and someone captured the traffic. You are the analyst.
You are given login.pcap, a tiny capture of that login. Your job: find the HTTP request, look at its Authorization header, and decode the base64 value. It has the shape username:password. The password part is the flag body; wrap it in the flag format to get the flag.
Open the capture in Wireshark, or search the raw bytes for the word Authorization. This challenge teaches a painful real-world truth: HTTP Basic Auth sends the password in the open. Anyone on the network path can read it. Real routers and sites must use HTTPS.
This challenge only. All names, addresses and data are fictional. Do not test any real system.
Stuck? Open hints in order: a nudge, then the next step, then an explicit pointer. Costs are taken from this solve's points.
Sign in to open hints.
Sign in to submit a flag.
Sign in, then solve this challenge or give up on it to read write-ups.
Files are safe practice artefacts made for this challenge. Open them on your own computer.