Bob and Charlie were sending some messages among themselves,and I planned to intercept their messages and get something out of it, however, they are clever enough that no secret gets leaked.
In order to decipher it we need, a Passphrase and a PGP PRIVATE KEY
Passphrase
We got the Base64Encoded text which can be the Passphrase.
So lets decrypt it.
helloworld
PGP PRIVATE KEY
We didn’t get the PGP PRIVATE KEY yet.
So let’s analyse the PCAP further.
Doing strings analysis shows that there is an PNG Image.
So now let’s find the packet which has the PNG in it.
In Wireshark we have the filter, frame contains <>.
So applying frame contains PNG filter gives us the packet.
So I made a Python Script to extract the PNG data using scapy.
from scapy.all import *f=rdpcap('1.pcap') b=''for i in f: if IP not in i: continue if i.haslayer(DNS): if i[IP].src == '192.168.42.129': b+=str(i)[224:]f=open('1.png','w') f.write(b) f.close()
Data Engineer Intern @Rolls-Royce | Computer Science Undergraduate | Amrita Vishwa Vidyapeetham | Former Member of security research & CTF team — @teambi0s.
Data Engineer Intern @Rolls-Royce | Computer Science Undergraduate | Amrita Vishwa Vidyapeetham | Former Member of security research & CTF team — @teambi0s.