Forum Discussion

Dark_Knight666's avatar
1 month ago

Modern Encryption: Demonstrate Your Skills

Hi there,

I was wondering if I could please get some advice :-) so I am currently on Q7 and I have opened the PCAP file using Wireshark but I'm a little confused as to where to look in the PCAP file?

 

3 Replies

  • It's actually not needed to look inside the pcap file.  Did you run any tools against the pcap itself to find any keys?  Once you do that you'll have the key you need to decrypt the AES file.  The 3DES file (which is what Q7 is asking for) password was inside the first token file I believe.

    • Dark_Knight666's avatar
      Dark_Knight666
      Silver I

      Hi there, not really sure what you mean by running tools against the PCAP file? 

  • Hello Dark_Knight666​ ,

    If I remember it right, every next lab uses the string found in the previous one as the decryption key. You just need to keep executing the OpenSSL toolkit - just modifying the parameters according the cypher - with the keys you found.