From 2fc6a5ce10831e165ba775ca3c6cd62771274a40 Mon Sep 17 00:00:00 2001 From: h7x4 Date: Sun, 5 Jul 2026 05:31:05 +0900 Subject: [PATCH] forensics/webnet0 --- forensics/webnet0/capture.pcap | Bin 0 -> 13163 bytes forensics/webnet0/picopico.key | 28 ++++++++++++++++++++++++++++ forensics/webnet0/solution.txt | 4 ++++ 3 files changed, 32 insertions(+) create mode 100644 forensics/webnet0/capture.pcap create mode 100644 forensics/webnet0/picopico.key create mode 100644 forensics/webnet0/solution.txt diff --git a/forensics/webnet0/capture.pcap b/forensics/webnet0/capture.pcap new file mode 100644 index 0000000000000000000000000000000000000000..249c12bcd0d11edbcb66e024c6c02c4c4c2d6c42 GIT binary patch literal 13163 zcmca|c+)~A1{MYw`2U}QfsuiMVGB<}toJWg20sP{FlKZ7%^SIotw?pEZUzT~D+7ZA z2x+s`?`U}2Bfdsn?9PMxjJsbct!)6Aw1MgW|BhY;1|}BPEJkK#HbzDcF80?k{UA9O zCWz@7zgQW(7#P49VlKoEu<14+(;e8d_JB+V*}%B_!Tm{7%zwU8THCllDC7PGJ&@_j zj4VtXT#63_&wxy4WM*auxqC_s8`#Ytw?oW?m=87?)7`Hacdu_-zyWd_$lVueK_;WP zdj&`i=I(hhY+yHo+zv4pVh7lCZ0>&bZ6~Me`nCm}Sls=T{dLR=n7hwsu`xI?Fn}?{ zOo;hllTAP&qRm!+1QZ&eP=SVbqSi2vqi4q*V>EWm*iZL@XF)%VP{$XaGabruv4!d6rwI5kmykHeMK9yy$-dz7! z*HoUAOIQ4aSQr?J4j3HJIiPVs<$%ZmE{3HH3mN7!WHV$kWH4AVm@}9iFgl=jKpnE{`fa(Fh z11t=47;G5y4+tILU=U*vVBkH#dw`jNi{U>b17jis1A{q(DFcI1YO;~8p@puIk+H6! zg^8|_fq`CWv2JQ&afz;xUUGhJL1{^8)U$2zbw>1bb+`ga&Nmhyv1Yfehj#&*dacwRegCPq87()_0!bBG3ur(kP1vIgm zD8X?1iYTgyV$948rc4YBhRn<|TAhvUafk0uDB75=C{uC2viE)bWW~_((`k>6dGDH ze9|uS9sHvru*ZOxjZ>@5qwPB{BO^B}gF%cTw*e;`b0`a&FjHu-p`Zajh{M6d;hUM9 zk(r*DXDDPK01{&7;q*?-0jI!xm@+ONj)2VMdp< z137VCLrVh-LnA{|6GJ1*C~;mR0|N^~LnxQVwl^^6DyZJ=nS4y{;^#6>Jx?PIp;L4Eo2JQEBiRr!rSVq<%y>6Ebg5epLEZ0 zvn{#(ZEZoO`C|KIk>xAj7P=%{{(hy$fd9t-#5GT~^_X2Y_T{|kNOd)>Po2oTRk7ar zoMSb!f0Rgk?P7yvDUK@5(anOX_jA`wleJEHUEq9XgTzdyz|?)5XAi|*n7T&etl?>f zNgelBd@cARWN^HV9+I{)o{r{6a%ma>m?P60~G^5vK?_A-7 z54#_$+`pt&kZV@_2~S0xb)M zt9hKPf4Aj{)M;xmKl|kM+^lcb@wt~P-EYZoDBU!#?c<-H@82N1D0{~|_h{prx(h5e zYBZ)7iYwjvr6F>L@Abbsym$C+Fn+PLH4iy(wxl*HZBjwIM09R{(o@-URfQYRJ{8)) zC)i-co16dVf}m@M$frs_;gkn6xnw7P{9*#^3TZDSvI*vL4?_Kf% zGvq)u9n&(Tnhw-_bX(uHh!3^y6k=n49ditnP&<%KB%JiY&Ghwclcrd|Y!G1oySo`B zp}qu}c<4SGxF!bG$e6WphCIlP|F&XvBT8)yaU&?7LTlp(>PK#WGyRe)y~E{xx*%IJ z?~Tg^PjydhKk{I!-y^@1Ge&FUeB#>zqqXs9Z9GV8V~@vd3=ND7U<_%Dor|x)6Zx?#G zS5H{1>f&nNrd8?cF~L*Zl{EynOrN;0WV420l;!CFUngOq3DyM@d z#N?jJnq|#A_t{V7CjSmgTKvFo@6}7soT3l6i~WxOaO`iMYw&eRy{}xqtP7qQJg@P8 zcqr{|sg$_eHq*=$6Q&P_3hB&!F&`V4m^Vc9rim{<-+$)egR{;Yhg&6#Y*RhNz103> zCT($_YB_P&{p;D*?&7*azAr5mmTX8?_TUa$yj|^2-qsg&D|~L6FnVPFlzp<`(^;n8 z^gGo>Wg=H!AE}F9{Nm=NUs>Egb$2{ADf7DYEMxuNYmGm)#!EXpF4?GRp580M%*?>Z z2r5xEPFyRL2&_!6G(^6`sFL74M!Rz7#?5LfW(L510hcK*D=RI z)}LZwU^vFWz^KD;z%R_j)6D49ql4RzH$Cobt?lwkRDS7JvETev6vuY=--=J~=O1*t z*<*dXD=wtPXZr~;@8uE}U)dIj_GCVHJt6VK*6p;y`haHH8UNp%%@X@MW3`gXhG|F5 ze=EODKbVqoo2R(P_DavSuru*&(`QV2>S+-4O7t@G9m^V_Hl7XdCqM0*GF91D=knJI zPgd`)S%DQlqRW28$0slTbBK3A%i+`Scy^vFU%%qc#r{*T_i1pw(KVj8toWzM>535F z>)#4LYfWPkL4@h~ou)Hl(~|i(wy_s?bIG~Q^zYj;B%`(Wtxb zFepq{2eX4mYCt14kkEvLEGSGFaI`oV@qOFLYYM7%&pw5ODf{b~`-%^Q*gz&aC$p0> zZuORN_b*wN$)J%1(72VN0>-%2Ly#P7+$t!UowRYQw}&;ALw?D!Ou-zt64GFQ9rF-2 zZWWQt4$kSI9FHCnSaLhKr3?)T2@ZyCJ9tPu0EGlnZuj6+(D^ny;Zj;fJRkR=TEqX@pBSx7`(`*viPU=ayqJTuy1meYzubg8etgZ6+NK^*bW|eLDn`gKL*R zS`ufFv!LeefjhT$PF0HGu-);!Bf=xIRczX!BXa&tOrB>Ba$6p%U1VVP|6Oh6kFRn-7HFx5oBuUX7N^hlWPpz@mxVd>2^PziwWx5Qi ziYFWntVuVpe0k}njM0sv|CyozN8?VP+0?zhM*YRgcfYSs{1&rXZha|dm$`FYRJ})v zY{S-BEA+p;y|Qw5!Q`MD_uW+H@a&vg_U%s{heDT===CJ6vVhnXlhS@x{Q12(LuS#Z z-JAAQr!_M#PkkumR`&6yx>(n(o|m(|m*-z!sqr?cY?oI!f_w>r8=WM*5TY^-Hx14F?y^{wxG1~ZVdb0n(`qBR7X#a9_w0G!__I|uYQr!t|aW3}xwv*2s)WSKP z3a{z@Dn1a>0u@OIyf{c{&4cSswwZ@D)m=cXdGk{+6Jx~{9|*aDOuXyEK}xF_*+dBr z1~+k36OmfQl4nf+x<%hDei;&Y&}qls;9Aup=hG(Xb=G>{CNW-}aQ$0P;ScY1`i~dC zD_!nCKfWkCVs}jpYt_o#J8s-k;oPwP(DEIN8J$aBvpz8mW-;Eq`PJ^9Z}zRqnEF!w zP^f{mWHtx$N)Mi$Lea-wr~N-2P};ob;RR{`^uM_~@0^<)-D3G%X{lPW;Kr<*ZnZh3 zJ3{pXtt>vh+TG-TWO+f)-D%SQW~=Pp+iw&+%RXc3hxxOb5BzaFyGQ4De4gv?IlpU{ zCv^U|nNjqTF@X2G>GmLT>6?j>>=H?(yX$@b1zYg#O_-^!Ubn2|z%s#&q0+Af;<<}U zI1es)oZ*vYDnB{q#*_xx^~aIgTkI}@tadZ69$@25e9^7W)hc}G>E|z%GQ01e+ana@ z`oUs((%xcq*NZ`*_&6BAfu{}YWDlxz)SFQ&9d(yqvh3H<+OVnYuVckQl@6Xh@M;_P zw1($W+y>gODufMrc4i(Icv^bm@jROap}TH*9u|21q(`1vG4n>q;_hk#CC7EkF3fpe z>tgp+uVKNm;sX17Ws~mi+;HmhyUkgptLw!!>^-YFv)=0957Uenthp{z9z1cGG=06# ztM@Y`{Lb#IdieNf*#pr+=}ybiW{CrhyUQ6@Gb=`lD3o(*o_a5}aOPHNfybX5I#yWm zygi>|HhccD4>JvT`CBhcvp73XvAWc#-C_z-m_Ez@@-X!5$90ZA9)2nZE^KmoT{E9A zXG?sGRI=jf{qj-%v4%@cpPyy~h3S%Gq~{v;>xVTp+(7xz)DND<%@iL9rGiX+ew~Bi z7b620qqkuh-#|x>ctE2RpqP39&NWaIB{&#tBj6@lf=m==W@g+BO(X{ecQ?)F5cpeB zAGLnP;%hU@nv&Lb=C56<))}ZDG~tzA3-=_4otxCTZ~MK{egHzlVray`Q9=$HKP+vT0a7xnRVNnbvLE{fBEG^eB6?_cchyn4zx|F^-RVvds5`=`p|wy-agJgfBVrSC$)qU;L_4t5QtFMVEx zBo%&L@pv9b&$>-*@5q!Sa(9woaSjqPhmvE$px@LuMG6T|N7dnX?#_Vh0+Z*yUkVYpOwHSBz; zXYWJ3e`-s1y4M&iU!U-!qD+H+}4 zGd^r>xzKs@k1n^w-b2mboE^8_P|9>>0i}dnH#r!DSsB0>(vN|p2T*T@mDR}slwXxM zgHiz~H8Ade@D`M=e#vt7H%KtNzVaQC5)>Z@b+EsVwG?M&W;p{*+Uu7FIsf5ZY4GLg zx!s;il|-*bN!&M4X7Wni8WsC$@8aK_2NZd@Cv3bi;h~&*o?zsnrJ{#x?!+p~pWR(4 zwBoApO}ngpihs6zpR@IiuKyuhEr;OFYL0qAfvW8rG?%sVI4pm%=gP{-*Dk(JWSBW+ zLWi`pdHB;=5j}A?SdU!R3GUy>P?*biWnZhW*=gN0@1SR^xOd+4&Aek@8L?b2LQwrI z>+G3-t0p-olurDgb$FGsbI<&+&SjrARD7)e+_HB5lb%~{N&4zyb0ZU%s4qHs*|UMO zw_WN?oYRclfOFp(cDyTCRVtA^t?s}EuT$$J9~9=AoH}9rFxsIe}N0ehNxiFWC3n;UTNOtL(o8d*9sn zw$3>Dzrl2ebqf6tUf;G*yL{pJmJ4=gkNZm2_t{u|+VlOe(BpTeX~sJok9=HVzqmGH z)sH`O+DjGegbo+Ja14Jn-@Rk^uAS4x%dT0S`@zy_5U8->^PL+RZyUeb6nb11{ZRjQ z>6g}jZM*$am&VL^eMuoP;qb)h!f$g;l?|$w|Ff8un&^|hKlbpGjV~(Br2F}>@VCBx z;S>1uzXqdq4$uB;UTYY*qEr5@3V!`npjh!7--7Z@|Nc9tXUz9w(95s=rem@$M&x6U zg*V6LId@*C*Qz@nT6O3O&v}RaE|U$X&fT*iRdNZ-HI`XF1(-Gz)b;JDwG9jSncBF& zGS9m`^0{;2hdVrhdE0d7arN+gE0bQjuX*$K`z!4dr@wH&6&mlg=TW+uzvbsO%BzES ziAUvrRFz9|IK4AfTs-T>0Vd(1o%qeu zt=g)zNk3E*chtJz%gl9as`3o< zlRS0RxqiK_3BJDfV{UR%t^N1SFDzH>ez~B%{WrtQ?I&LNoib85H?cjmiI3;-gUB6! zxucyXO{`Ig<>Y;tvqbO2OZE29OF}uD_ug`O7X4(Ce`(;6ZrQqfkMcDBRLag!=)e2F z_?(j9{Vzv4bDkj!ivjt{4%0HZx{Gm>^`KkGgH)}Uuo&7#SE{a)B`9RXi8@R_0Ds<L#p4}zn}saRPaJ3ZlFVl5*!Q%rov6U z3mQ5ERlkRz^Avq&KEz*LyK>`YgM$B8rBkb48X1}&e`-_v%>3-C4-L`weTTG{WN$y& zvC3<9fb8yPk$jJZHs;;+qL_- z&#rd3dj7PJhQG~aBVEJ9{L(*Gd_~W0Y}eiKL*}88;?A(L2MLQ@W<&t;kRUHQ<2t0ew?)Xt*bd9Td>%@bcIzJ9l) ze(JJxn-@pKr~gvDre^nait~%V1;)307g^n9h+1*1|A|iNh5e@=Y zGr!b(&hy}3poH-`kDI}Pi2;luNdl5QKna7%C~O_5HWrcqB??gDfXpD-yndy$sT))q zUs8c248;e+hU~9n?}8G>Pv~R||J#MLx4O4pV%vE-yeF&4^Xcb`=fc(-v{+s0B7|}x z_FAS!E^qc% zf{?oH|%FOm|=$GX;Q`)j9 za_5Tgd&@qo-@lHzm*v@~m)&K|#+g1Z#ZEsra6PlMs!sXT0**ULHLq93ss_Bs|H0)u z?^Mp)^&8pOT`;>P9Fgr@zBN-~OV7R+d$#rM;_>g;_1JpmcgK@+FMr)&m~?W>_ge>d z?tCPB@MQB-{vXWT8%3-pe@`!XGx1YHnaNF4`R~UV_kHzFTXk*CtOK2U0=@Zlb#K;1 zaG%^{*7{_*gE)7B+x3 zjq1f^0)(FHY8f`j317|g`@ zUXY2P6q*k$y84fwcpIOXc$=B^wxloj8MP+g&HwY~Ea!S$X{%LvanY)u_f3!atk20c znRu$@{^aYr;#zOiJ&Zk8$@m8b|NpR2{r1K9y;i15%|0KeD41w+v0DF3ej#nOuz32SLpcKas_y4ga zl=V)eAaA=)m?qoJ!0~bb)OZU zxSo*vqieEg_jjSmoh!Vbe0eF^`ECA>pm$mm%SC&e%k}PGoV4TjiFqs4`rpTJrTyZK zb;v80SjezjnsaJQ^SlSXMxQ&UrKkFeXmZWwepTYP=uR6Go6Gk9*QdAFe3DvQz5Ud; z06~$|ypsHie8D~m)hjIp`Lq02?vASF1;yeY17?O=CI&Eu#2+LsL9xh`AGRJ;&IsND z#ULmqA?1wS%U4R9|2If5e7TeeiABW+B7fOm$M=deGc%b%%Nc>Y$5?e%huD65SK73$ z?9O)s_uKa8_O4r_n3y|HWVJR=x`wHLY?Db0d;X^l8vHfxv-qVW*jF#z%K6))Xvy+d zN8;~K-j!uK;Ysz0g;_Fh!xeQNd{(B<-rTlcMLF9(%i?|AocBlWVl&i~Ka6oUK z>g9dUa(T+j9Q+mj^#?o;oGXz{SrN9j=Y~AbZ?(rSbgu-PX{D;GQG_kz`8T66-N)uyPc9Lx(N zE4+WPDDUh|TfJ}FouX&q-&Wodxg-`-|Kj)A@=M#}`u>V{s2uS>*zjhGUdX}~-tOU_ z9{GzuoRDC!`ew<-6MeGsUeY<9zJ^}OQTN-uQx-PfZQxtjBC%@I-6X|W$vvH#eyjfJycfuPUX_$L$2Rzxp~Df^ zzBnzn$dJ`qd{-V`v|hgJ;bVKdJ-q3O{{EL%|C;AEd-93J{Z?Qp)xXG_Z+-fx_{7AQvlH)q=03jnSl+RYGjrOvTmEoc-F`XH@ZsLG mwL%v`iP35qGs%V2=KqtXII1)Vuzz2D2a*`sU&pToB}f3sIVoxY literal 0 HcmV?d00001 diff --git a/forensics/webnet0/picopico.key b/forensics/webnet0/picopico.key new file mode 100644 index 0000000..9e62d18 --- /dev/null +++ b/forensics/webnet0/picopico.key @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCwKlFPNKjseJF5 +puCJU5x38XcT1eQge5zOKNahAlYudvGVOEs61TnIgvcER4ko8i3OCwak2/atcGk3 +oz9jFKep7XFEYNP31IwwD9j/YazlKy4DRLGObOyIZUU1f2WRA7Uhf0POQXsDT1oU +X32jMKZkQSSDW4MRZd9trJYdO2TrcEPMsBiZQlFlvgnNwl3QlawozTHLAJKI36j1 +cPwSMMeNca1e0Zi1s7R5IxfhpNXOBF0FmxiWvmeOHbaspyHg8UEmGBrkd4k4wXSK +GQvrc8QjycP4ScEdquxJiYnDT8iEbAq70/7f/5NIN1DE9YoGJqKYjTS9nRPB4Yvj +JN/SJnhvAgMBAAECggEACCnd3LrG/TZVH3sROqvqO1CwQPYPfUXdLVyNHab7EWon +pc+XBOHurJENG2CpRYF7h+nQ5ADhfIYSCicBf/jsEB7VueJ20CxEVtHVL3h6R6Bp +oHMle0Em8OcofuMpdL/kO+om3T8BkVSzCvCl5NMTUuAF7iRmfX7oDLALwM0IzzQv +2un+2UmT15rgAZfl3IL1PGvJhbhLxfeeyPE9MBy1SqBjQ9rNFn8sQv959J6BHz4b +EpK//ErtNP2yh7oiVBBgKEQ1gEuOjQC/4oxoqCFfZaf9XNRCxB/zY1nUprvJyz09 +NMQWNF2EmvmBVGfoTxmuut5N0GbVr2UyHxWMKm2sOQKBgQDpb2+AWgWlGtetuLKJ +fJs8dnd6LhnafbKCOXMOT68qMBRoTpBtVTLRVSNvWCm8m4TTEazX4+ZA+bJFwUFw +aATDmHcr6lMI3tNKrcsnY2F7o5I4z6mwuRuSeszq/ndxZqCzwCu4nKixh3cznp7j +JiElNG0d8Lu5eQgmVAK1AhWXfQKBgQDBMa9ga7VJUP4pzcHnWAoi34OpfjvQYeGl +IKL3AKO4OedaHdH9qid41PQHnL7O3xzN669SkLZ5s0d88A/LFLk4oZNMKdkSTQIQ ++AMbXH01HGFvnCOuPg/FbNp1wS7zJEg5u5HFQWyMPNJLr/hZ6g2Yp+UGpAcGTwM/ +RCPVAPhLWwKBgQDAB0OaOnPaVjKGXiHAqBirrGiswa/S5QQrzEaxxys5cUPYaoi0 +6BldysPTnJr45JZna2rcTkXjvYTBjTDf3zHMFWgzYBfefC8kh8NPK5nNs8ldorbd +AemEnjBkP+DSELKyK6vLulOrdtzAQgRCp+MsT+xTbO2ArefeX826SXSpoQKBgC2v +nDOHBQXje1dTawlUToFUrgQE8AwlOYEdKKyUoCLOvqEW8DO2a0MtyM+MB6tQI7Wm +iH1T73L0LHGlK3bw3aRAwV5/fu/O+jAdFk8AHjPTFE+acu2fi4c6aKb0GjAxYksU +yjIFeK/pKinv4SESMkjpW0WowGiDgtcRPBAA/LaFAoGAfEM1rfM0v3UmB7PS6u0m +P3ckP2CFCdaryXPfC52GBcJ3Q46YpsQvLTVotM+teHvTjNw2jwwZxIl4NenGSEj3 +KDhQoOiQC9BrDD+DB4I9+T9nxT3g7R6MrgITghB4We7TVhL/PljnJTyDqpjNA4kY +TveAJPv6Xq1ERt5PUtX3BqQ= +-----END PRIVATE KEY----- diff --git a/forensics/webnet0/solution.txt b/forensics/webnet0/solution.txt new file mode 100644 index 0000000..ac72e9e --- /dev/null +++ b/forensics/webnet0/solution.txt @@ -0,0 +1,4 @@ +1. Open wireshark, load the pcap +2. Go to preferences > RSA, install the provided keyfile +3. Ctrl + R to reload packets, the flag exists in plaintext in one of the packets +