Forum Discussion

Dark_Knight666's avatar
24 days ago

Modern Encryption: Demonstrate Your Skills

Hi there,

I was wondering if I could please get some advice :-) so I am currently on Q7 and I have opened the PCAP file using Wireshark but I'm a little confused as to where to look in the PCAP file?

 

2 Replies

  • It's actually not needed to look inside the pcap file.  Did you run any tools against the pcap itself to find any keys?  Once you do that you'll have the key you need to decrypt the AES file.  The 3DES file (which is what Q7 is asking for) password was inside the first token file I believe.

    • Dark_Knight666's avatar
      Dark_Knight666
      Icon for Silver I rankSilver I

      Hi there, not really sure what you mean by running tools against the PCAP file?