Your Own Wire
Medium 30 ptsNo download. You are the capture. Open your lab over plain HTTP, start a capture on your Wi-Fi adapter, and press the button. Your browser sends a token in a header it will not let the page read — an HttpOnly cookie. Script is locked out of it; your NIC is not.
Hints
Open them in order. They nudge, they do not solve.
Hint 1
Start the capture before you press the button, and pick Wi-Fi — not loopback.
Hint 2
The lab is plain HTTP on port 9080, so tcp.port == 9080 cuts everything else away.
Hint 3
Follow → TCP Stream on the POST. The token is a Cookie header in the half your machine sent.
Your live lab
Plain HTTP on port 9080 — no TLS, so your capture is readable end to end. Start capturing on your Wi-Fi interface first, then open this and use the buttons.
Display filter: tcp.port == 9080