Skip to main content

shark on wire 1

  • Description: We found this packet capture. Recover the flag.
  • Difficulty: Medium

🔎 Solution

I started by opening the pcap file in Wireshark. My initial approach was to examine the TCP streams, but they didn't reveal any useful information.

Shifting focus to the UDP streams, I began to notice meaningful data. In the fifth UDP stream, the string picopicopico appeared.

Finally, by following the sixth UDP stream, I was able to extract the challenge flag.

🚩Flag

picoCTF{StaT31355_636f6e6e}