TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / Traffic Analysis with tshark Simulated 0 / 90 pts

Traffic Analysis with tshark

A capture from a compromised host is on disk. Use tshark to review the protocol mix and follow the traffic to the credentials an attacker sniffed in cleartext.

Available tools: tshark · tcpdump · grep
Target: localhost (127.0.0.1)

✓

How many HTTP frames are in the capture?

25 pts

Print the protocol hierarchy.

✓

Which external IP did the host POST credentials to?

30 pts

Read the packets and follow the HTTP POST.

✓

Submit the cleartext password captured in the POST

35 pts

Do the work in the terminal first, then answer.

Applications

target 127.0.0.1--:--

analyst@kali: ~ — Terminal

Congratulations!

You completed Traffic Analysis with tshark.

Points: 0 / 90
Tasks solved: 0 / 3