TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / Reading a Capture with tcpdump Simulated 0 / 60 pts

Reading a Capture with tcpdump

A packet capture from a suspicious workstation is on disk. Read it with tcpdump, spot where the host is calling out, and recover the token it leaked in cleartext.

Available tools: tcpdump · tshark · grep
Target: localhost (127.0.0.1)

✓

Which external IP is the workstation contacting over HTTP?

15 pts

Read the capture file with tcpdump and follow the TCP/HTTP traffic.

✓

A DNS query leaks an internal hostname — what is it?

15 pts

Look at the DNS query in the capture.

✓

Submit the token exfiltrated in the HTTP request

30 pts

Do the work in the terminal first, then answer.

Applications

target 127.0.0.1--:--

analyst@kali: ~ — Terminal

Congratulations!

You completed Reading a Capture with tcpdump.

Points: 0 / 60
Tasks solved: 0 / 3