DP1H3R0X || CTF Write Up & Cyber Security Learning Community

 GreyCTF 2025 Qualification Connection Issues Forensics Challenge.     ❇️ Description :- We are given a PCAP file where an employee suddenly lost internet connectivity while browsing the web. Our task is to analyze the network traffic and determine the cause of the disconnection. Step1 :-  Analyze the traffic capture . I began by opening the provided traffic.pcapng file in Wireshark to analyze the captured network traffic. Noticed normal HTTP traffic a request to 192.168.100.1 with a response containing a message: “Hope you’re enjoying GreyCTF so far :D”.     Step 2 :-   Checking Lower-Level Protocols Since the issue wasn’t visible in HTTP/TCP, we inspected ARP traffic [a protocol used for resolving IP addresses to MAC addresses].         While inspecting ARP packets, we noticed some had unusual data in the padding/frame section. Extracted the data section of these packets and found Base64-encoded strings :- Z3JleXtk MWRfM...