For the past three years, I have been a volunteer for our Cybersecurity Festival event during Cybersecurity Awareness Month. In my first year, I volunteered to create a few purposely-built vulnerable machines for the Red versus Blue team event. Last year, I volunteered for two events. The first was the Capture The Flag (CTF), and the second was the Offense for Defense event. This year, our Information Security Office team asked me to come back to be part of a talented team to create …
Tshark
Working with PCAPs
As a network or security professional, working with PCAPs comes with the territory. Some CTFs also include PCAP challenges, and while Wireshark is the software of choice for some people, learning other tools can help get the flag quickly. In this post, I will cover command-line utilities one can use when working with PCAPs. Misspelled user agent In one of the CTFs I participated in, the task was to find misspelled user agent string. You can do this with Wireshark, but Tshark and Linux …