M4ndU의 만두만두한 블로그

OSINT - Triangles

go to google image search

done.

Osint - Silver Darlings

search image with "cafe de la mairie"

OSINT - 50m on the Right

image search -> Armação de Pêra

you can find "bistro 24" in this image.

And there is a restaurant on the other side.

OSINT - John Poet

i searched image with "R.H.C"

OSINT - Skyline

First, when I searched the highest three buildings, it didn't come out, so I searched the color of the sheet.

Then, I could find similar cable car image.

It was london cable car.

A png file is at the end of jpg file.

flag{0n3_1m4g3_1s_n0t_3n0ugh}

search "flag{"

usbhid.data

https://github.com/TeamRocketIst/ctf-usb-keyboard-parser

base64

hex to ascii

magic hash

?hash=QNKCDZO

change cookie value

base64 encoded

guest -> admin

base64 decode

Ment0rNet/00:23:69:61:00:d0

413.576954

59274

$tshark -r evidence08.pcap -Y '(wlan.bssid == 00:23:69:61:00:d0) && wlan.wep.iv' -T fields -e wlan.wep.iv | sort -u | wc -l

29719

aircrack-ng

crack key

airdecap-ng

decrypt

arp

공격자 : tshark -r evidence08.pcap -Y '(wlan.bssid == 00:23:69:61:00:d0) && (wlan.sa == 1c:4b:d6:69:cd:07) && wlan.wep.iv' -T fields -e wlan.wep.iv | sort -u | wc -l

그외 : tshark -r evidence08.pcap -Y '(wlan.bssid == 00:23:69:61:00:d0) && (wlan.sa != 1c:4b:d6:69:cd:07) && wlan.wep.iv' -T fields -e wlan.wep.iv | sort -u | wc -l

admin:admin