ctf.nitaimaarek.com Tracks Leaderboard Log in Sign up

Tracks / Traffic Analysis / Your Own Wire

Your Own Wire

Medium 30 pts

No download. You are the capture. Open your lab over plain HTTP, start a capture on your Wi-Fi adapter, and press the button. Your browser sends a token in a header it will not let the page read — an HttpOnly cookie. Script is locked out of it; your NIC is not.

Hints

Open them in order. They nudge, they do not solve.

Hint 1

Start the capture before you press the button, and pick Wi-Fi — not loopback.

Hint 2

The lab is plain HTTP on port 9080, so tcp.port == 9080 cuts everything else away.

Hint 3

Follow → TCP Stream on the POST. The token is a Cookie header in the half your machine sent.

Your live lab

Plain HTTP on port 9080 — no TLS, so your capture is readable end to end. Start capturing on your Wi-Fi interface first, then open this and use the buttons.

Open the wire lab

Display filter: tcp.port == 9080

Submit the flag

You can solve it now, but to save the solve you need an account. Sign up or log in — it takes ten seconds.