TASK — 01: INTRODUCTION

Phishing remains one of the primary initial access vectors in real world cyberattacks. While modern security appliances catch a vast…

What happens when the attacker isn’t a stranger on the internet but a colleague who already knows where the sensitive files live?

In this forensic challenge, we are to investigate a network traffic capture (.pcapng) to discover a covert communication channel being used…

The Windows Registry is often described as a massive digital file cabinet. Much like a physical filing system where different drawers store…

Jitu Sah 3 min read

Tiny packets, odd hours, suspiciously regular. That’s basically the polite way of saying someone’s been smuggling data out every night…

Scenario: A short PCAP was captured from the guest network of a hotel. Tiny packets were observed going out to a :8080 address at…

Room: Packed Light Category: Forensics / Network Analysis Difficulty: Easy Time taken: ~20 minutes

TryHackMe forensics challenge walkthrough — Wireshark, tshark, and reversing a XOR + base64 exfiltration channel.