wire lab plain HTTP
back to CTFEverything below crosses the network in the clear, including this page itself.
Start your capture on your Wi-Fi interface first, then use the buttons.
Display filter: tcp.port == 9080
1 · Your Own Wire beacon
Sends a POST. Your browser will attach a token it will not let this
page read — an HttpOnly cookie. Script is locked out of it; a packet capture is not.
2 · The Silent Pixel pixel
Loads a 1×1 image. The flag is a header on the response, which this page never inspects. Reloading this page also re-fetches it.
3 · Slow Drip drip
Fires one small image request every 250 ms. Each response carries a single character of the flag as trailing bytes after a valid GIF — unreadable from script, plain as day in a capture. Let it finish before you stop capturing.
Honour rule: the answers are all reachable from DevTools if you go looking. That is not the exercise. Read them off the wire.