Forum Discussion
Modern Encryption: Demonstrate Your Skills
Hi there,
I was wondering if I could please get some advice :-) so I am currently on Q7 and I have opened the PCAP file using Wireshark but I'm a little confused as to where to look in the PCAP file?
3 Replies
- GuyIncognitoBronze II
It's actually not needed to look inside the pcap file. Did you run any tools against the pcap itself to find any keys? Once you do that you'll have the key you need to decrypt the AES file. The 3DES file (which is what Q7 is asking for) password was inside the first token file I believe.
- Dark_Knight666Silver I
Hi there, not really sure what you mean by running tools against the PCAP file?
- T3S0r0Bronze III
Hello Dark_Knight666 ,
If I remember it right, every next lab uses the string found in the previous one as the decryption key. You just need to keep executing the OpenSSL toolkit - just modifying the parameters according the cypher - with the keys you found.