Let’s investigate Malware Traffic captured by Wireshark!

ip.src == 192.168.1.10 # Kaynak IP'si 192.168.1.10 olan paketler ip.dst == 10.0.0.5 # Hedef IP'si 10.0.0.5 olan paketler ip.addr == 8.8.8.8 # Kaynak veya hedef IP'si 8.8.8.8 olan paketler ip.ttl ==…

LAN SEGMENT DETAILS FROM THE PCAP

Short summary: I started with a PCAP, found a PowerShell payload being delivered, recovered an exfiltrated KeePass database (.kdbx) and a

Infected Active Directory Environment:

Hello guys, this is Mousa AKA 0xDolphin. Now we will solve the Forensics challenge of “Never Gonna Solve You” in “EnigmaXplore 3.0”…

Welcome to this write-up of Packet Puzzle.  A very short summary of how I proceeded and what I discovered:

Investigating PCAP files in TryHackMe’s NetworkMiner Overview 1 Room

Sherlock Scenario

Sherlock Scenario

Investigating PCAP files in TryHackMe’s NetworkMiner Room: Tool Overview 2

A TryHackMe Practical Exercise Writeup

Analysis of the active Phorpiex Twizt campaign: C2 servers are on the Spamhaus DROP list and the P2P protocol uses UDP/40500. Current…

Machine Name: CAP Difficulty: Easy Operating System: Linux Category: Web / Credential Reuse / Linux Capabilities Author: Achraf Nouri Cap is an easy Linux machine that demonstrates several …

For free users using the AttackBox, the challenge is best done using your own environment. Some browsers may detect the file as malicious…

Introduction

What is PCAP?

🔗Room Link : https://tryhackme.com/room/containment

Tiny packets. Silent Exfiltration.

Welcome, enthusiast hackers! Have you ever wondered how cybersecurity experts catch bad guys who are trying to sneak information out of a…