View source for Attack Analysis

[[File:Attack-task-flagh.PNG|thumb|Task + flag]]
[[File:Attack-wireshark.png|thumb|Wireshark packet]]

===Description===
There was an attack against the web server. Directory and basic auth brute forcing occurred.

100pts
===Question===
Analyze the packet capture file to find out whitch user had a weak password that allowed the hackers to authenticate.

Password is the flag.
===Solution===
I only used a very lazy, but in this case effective, solution to this problem. Since I knew that the answer was likely to be in ctftech format I just manually searched for login attempts. I did a whireshark search filtered by the <code>http.authorization</code> parameter. I then quickly just scrolled through the packages until I found the right package.
===Tools===
* Wireshark
===Flag===
<code>ctftech{passwords-r-weak}</code>
===Links===
*[[CTF Challenges | Back to CTF Challenges page]]