Grab the router banner
Apprentice 10 ptsGoal: Connect to the Telnet service and read the firmware build token in its login banner.
Capture it yourself — real Telnet needs a terminal
- Start Wireshark on your active interface with filter
tcp.port == 2323(orsudo tcpdump -i any -w cap.pcap port 2323). - Run this against the real Telnet server on this box:
nc ctf.nitaimaarek.com 2323
Stop the capture and Follow → TCP Stream. The router prints a Firmware build token in its login banner — that's the answer.
No nc? On Linux/macOS try ncat, or bash: exec 3<>/dev/tcp/ctf.nitaimaarek.com/2323. The exchange is plaintext, so it's fully readable in your capture — that's the whole point.
Hints
Open in order — they nudge, not solve.
Hint 1
Capture tcp.port == 2323, then nc ctf.nitaimaarek.com 2323 (or telnet).
Hint 2
Before the login: prompt, the router prints a banner with a Firmware build token.
Hint 3
That ROUTER-TELNET-… token is the answer.