In this forensic challenge, we are to investigate a network traffic capture (.pcapng) to discover a covert communication channel being used…

The Windows Registry is often described as a massive digital file cabinet. Much like a physical filing system where different drawers store…

Jitu Sah 3 min read

Tiny packets, odd hours, suspiciously regular. That’s basically the polite way of saying someone’s been smuggling data out every night…

Scenario: A short PCAP was captured from the guest network of a hotel. Tiny packets were observed going out to a :8080 address at…

Room: Packed Light Category: Forensics / Network Analysis Difficulty: Easy Time taken: ~20 minutes

TryHackMe forensics challenge walkthrough — Wireshark, tshark, and reversing a XOR + base64 exfiltration channel.

A walkthrough of TryHackMe’s “Packed Light” — Easy, 60 points, Forensics category — from the Hacker Holidays event at the Byte Lotus Hotel.

Four rooms into TryHackMe’s Hacker Holidays, and this is the first one that sent me back to my own notes. Room 4 dropped me into digital…

Introduction