Back to Forensics

Challenge archive / Forensics

Scream

Original description

Lately we've been seeing some weird traffic on our network. Somebody is sending messages with screaming on an unconventional port.
We've also managed to recover a file but it seems to be encrypted. We feel like these two things are related in some way but we can't figure it out, can you?

Original hints

Hints are preserved as part of the record. Point costs refer to the original competition.

It hides in the packets0 PTS ORIGINALLY

Use Wireshark to monitor the traffic on the CTF network.

Unconventional traffic10 PTS ORIGINALLY

Identify the port being used for the strange traffic and filter on it. One of the transmissions is clearly different from the others.

Screams50 PTS ORIGINALLY

If the data is assembled correctly it shows some kind of hexadecimal data that turns into screams. Maybe we can find a way to turn the screaming into a password for the file?

Weird noises100 PTS ORIGINALLY

This audio file sounds like it might be hiding something... maybe an image of some sort?