Pangkalan

Kami menerima transmisi dari pangkalan port pulau pinang bernombor 55663. Mohon segera untuk memberi bantuan.

We are given a pcap file "transmisi_rahsia.pcap"

The challenge description hints about port 55663. So lets filter it accordingly for source OR destination.

Now, if you look closely at the packets that contain [PSH,ACK] flags, there are some lengths of data present

So let's add another filter, that only leaves us with the packets that contain [PSH,ACK] flags

Another thing to notice is the data being transmitted is some characters with base64 padding

Just copy them at every packet and throw it into a decoder and we got a transmission

The initials of the transmission is the flag

Flag: 3108{malbatt}

Last updated