Network securitymedium200 pts0 solves
Cleartext Credentials
A network tap captured a short session between an intern's workstation and an internal web server. Somebody used HTTP, not HTTPS.
Learning objectives
Use a packet analyser to follow streams and recognise credentials sent in clear text (form data and HTTP Basic authentication).
Instructions
Open capture.pcap in Wireshark or tshark (the capture is synthetic). The flag is the password of the service account used for report exports.
Prerequisites: Wireshark/tshark basics.
Flag format:
cspk{...}Files: capture.pcap (1.7 KB) (download after registering)
Useful tools: Wireshark
References
Write-up
The full write-up and learning takeaways unlock after you solve this challenge — spoilers stay hidden until then.