Deadly Arthropod (forensics) - invalid flag?

i display with tshark this pcap file but i dont know any hint

help me please!!!

@ak123 said:
i have got the flag in htb{xx-xx-xxxxxx-xx’x-x-xxxxxxxx…} format… still its not working… any hints, pls PM me…

Hello all. I’m in the same boat. What are we doing wrong or missing?

@ak123 said:
i have got the flag in htb{xx-xx-xxxxxx-xx’x-x-xxxxxxxx…} format… still its not working… any hints, pls PM me…

you are probably missing something… flags are case sensitive to start with

Spoiler Removed

I have a usrname, password and a lot of arrows… no HTB{} flag

Is this user error on the input or did I not find the flag?

imagine what the output of each item will result in if the device is being used on say, a word processor for example

So, I have the beginnings of a flag. I’ve seen references to a bug in the script, but I don’t see any other mappings than the one I used. Is this is a word jumble? Can someone please PM me a hint towards the right direction? I can’t figure out what direction to go from here.

@w31rd0 said:

@ak123 said:
i have got the flag in htb{xx-xx-xxxxxx-xx’x-x-xxxxxxxx…} format… still its not working… any hints, pls PM me…

you are probably missing something… flags are case sensitive to start with

I have the same problem. I got the flag and tried upper and lower case but it’s not working, can you help me?

Solved! Forget it :smiley:

decoded, I have username and pass, but no idea what to do next… any help?
Edit:
nvm, got it

@SushiStalker said:
I have a usrname, password and a lot of arrows… no HTB{} flag

Is this user error on the input or did I not find the flag?

you are on the right way maybe the arrows mean something

Edit: got it…

i got the live capture data from pcap file. don’t know how to proceed further and what to do with that.


00004f0000000000
00004f0000000000
00004f0000000000
0000040000000000
0000500000000000
0000500000000000
0000500000000000
0000500000000000
0000500000000000
0000500000000000
0000040000000000
00004f0000000000
00004f0000000000


i am getting these streams but what to do next?

Type your comment> @AFK911 said:

i got the live capture data from pcap file. don’t know how to proceed further and what to do with that.


00004f0000000000
00004f0000000000
00004f0000000000
0000040000000000
0000500000000000
0000500000000000
0000500000000000
0000500000000000
0000500000000000
0000500000000000
0000040000000000
00004f0000000000
00004f0000000000


i am getting these streams but what to do next?

username checks out for this challenge :smiley:

I can’t understand shifts there, please PM :wink:

left, right, right, left, right…ufff almost got lost right there :wink:

Just completed the challenge … If you review the youtube video from
John Hammond. You may want to extract -6 and -8. Character -8 will help you with the formatting.

Hope this isn’t a spoiler

Can somone DM me about this. I believe I have the flag, but error submitting = wrong flag. I need help/explanation with the script amendments.

EDIT:
Got it - hint —>, <—, —> :slight_smile:

Great challenge.

Type your comment> @ak123 said:

i have got the flag in htb{xx-xx-xxxxxx-xx’x-x-xxxxxxxx…} format… still its not working… any hints, pls PM me…

you are very close but missing some hex… that would transform keys

Nice challenge :mrgreen:

The last bit was a pain in the ■■■■!