Read the POP3 greeting
Apprentice 10 ptsGoal: Connect to the POP3 port and read the node id in the server's +OK greeting.
Capture it yourself — real POP3 needs a terminal
- Start Wireshark on your active interface with filter
tcp.port == 2110(orsudo tcpdump -i any -w cap.pcap port 2110). - Run this against the real POP3 server on this box:
nc ctf.nitaimaarek.com 2110
Stop the capture and Follow → TCP Stream. The +OK … [node …] greeting carries a node id — that's the answer. Type QUIT to exit.
No nc? On Linux/macOS try ncat, or bash: exec 3<>/dev/tcp/ctf.nitaimaarek.com/2110. The exchange is plaintext, so it's fully readable in your capture — that's the whole point.
Hints
Open in order — they nudge, not solve.
Hint 1
Capture tcp.port == 2110, then nc ctf.nitaimaarek.com 2110.
Hint 2
The greeting is +OK Sentinel POP3 ready [node …].
Hint 3
The POP3-NODE-… id is the answer. Type QUIT to exit.