Misc-traffic analysis of CTF

1. Traffic Packet Repair

Online tools: http://f00l.de/hacking/pcapfix.php (Traffic packet exception repair pcap package)

2. Export HTTP objects

After exporting, you can view the objects in the HTTP transmission process, and the flag may be hidden

3. Protocol Analysis

(1) HTTP

Hyper Text Transfer Protocol, also known as Hypertext Transfer Protocol is an application layer protocol for distributed, collaborative and hypermedia information systems.

HTTP is the basis for data communication on the World Wide Web.

Common Type: Packet Behavior Analysis

Flag information hiding

Sql injection message

         

File download message

     …

(2) HTTPS

HTTPs = HTTP + SSL / TLS. The information transmission between the server and the client will be encrypted by TLS, so the transmitted data is encrypted data

Common Type: Information Hiding

Ssl decryption

Trace Flow Analysis

Remote data manipulation

     …

4, WIFI password cracking

Use kali's aircrack-ng kit

aircrack-ng -w /usr/share/wordlists/zd.txt /root-02.cap