Forum Discussion

Dark_Knight666's avatar
2 months ago

Return to Haunted Hollow: PCAP Pandemonium

Hello,

I'm a little confused as to what I'm supposed to be doing by trying to answer question 3? 

So I've run the command- sudo /opt/ZIPPY on the terminal - and got to the instructions below.

 

From what Zippy is alluding too, they want me to go into the - Recycling Bin.pcap, where I have also filtered it to http, as I would have thought the answer may be in the (text/html) packet. 

But at the same time I don't really understand what I need to be looking for? A token, but a token for what? 

2 Replies

  • Hi Dark_Knight666​ I can see how this one gets a little confusing! 🙂 For Task 3, ZIPPY won’t give you that final code until you’ve found all four creature tokens in the different PCAP files. Recycling Bin.pcap only holds the first token, so you won’t see the Task 3 answer in that file.

    A quick tip: use Follow TCP Stream in Wireshark to track down the token in each PCAP. Each one will look like monster:food. Once you feed all four back into ZIPPY, it will give you the code you need for Task 3.