The Ethical Hacker Network - Honeynet's Forensics challenge

Latest Additions

Who's Online

dbest

Jr. Member

Offline

Posts: 79

Honeynet's Forensics challenge

« on: March 26, 2012, 02:41:02 AM »

The 11th challenge in the series is out.
https://honeynet.org/node/829

Deadline is May 31st.

I think I have the first question figured out, but the rest of the packet capture is beyond my comprehension.


	Logged

CISM, CEH, CISA, ISO 27001 LA

lorddicranius

Sr. Member

Offline

Posts: 447

Re: Honeynet's Forensics challenge

« Reply #1 on: March 26, 2012, 05:22:02 PM »

Cool stuff, thanks for sharing! I've never heard of these challenges before. I like that they keep the old challenges up, I'm gonna work my way through those too!


	Logged

GSEC, eCPPT, Sec+

3xban

Hero Member

Offline

Posts: 608

Re: Honeynet's Forensics challenge

« Reply #2 on: March 27, 2012, 08:28:01 AM »

I saw this last week, site looked fun so certainly added it to the favorites. I was trying to dig down for some "easy" challenges to start on.


	Logged

Certs: GCWN
(@)Dewser

sil

Hero Member

Offline

Posts: 549

Re: Honeynet's Forensics challenge

« Reply #3 on: March 27, 2012, 10:20:39 AM »

L'autre Endroit Cellule ... All I'm saying Wink


	Logged

http://www.infiltrated.net/mgz/puppylecter.jpg

sil

Hero Member

Offline

Posts: 549

Re: Honeynet's Forensics challenge

« Reply #4 on: March 27, 2012, 10:40:46 AM »

Quote from: dbest on March 26, 2012, 02:41:02 AM

Open up the capture in Wireshark, right click on the first packet and select Follow TCP stream. In the drop down, select the second option, (181875 bytes), save that as a file named "output" If you're on Linux, type: file output to find out what kind of file it is and go from there.