$ ctf42

NULLSTAR_BREACH

Forensics weight 19.48 No technique tags yet.
Difficulty Not rated yet

Flag format: 0xV01D{...}

At 02:11 local, the IDS on the NULLSTAR perimeter threw one alert and then nothing. By the time anyone looked, a box was already talking to the outside on its own.

You have a single capture from the victim's segment — capture.pcap. Everything the intruder did to that host is in there, from the first knock to the last thing they smuggled out. Walk it end to end.

Eight answers. They get harder. The last one didn't leave by any door you'd think to watch. __ Flag for this stage is 0xV01D{1_R34D3D_7H3_D35CR1P710N}

Writeups

Official

No official writeup linked.

Community

No community writeups yet. Solved it? Share how.

Log in to add a community writeup.