ctf.nitaimaarek.com Tracks Leaderboard Log in Sign up

Tracks / Traffic Analysis / Out of Order

Out of Order

Medium 30 pts

A single HTTP response carrying a small text file. Every byte arrived — but the network delivered the segments out of order, and one arrived twice. Read the packets in the order they appear and you get a plausible, wrong answer. The stream is not the wire.

Hints

Open them in order. They nudge, they do not solve.

Hint 1

Do not read the payloads packet by packet down the list — that is the trap.

Hint 2

Follow → TCP Stream reassembles by sequence number, which is the whole point of sequence numbers.

Hint 3

If your answer has the right characters in the wrong arrangement, you read the wire instead of the stream.

The capture

Forged on this server. Open it in Wireshark, or run tshark -r reasm.pcap.

Download reasm.pcap

Submit the flag

You can solve it now, but to save the solve you need an account. Sign up or log in — it takes ten seconds.