【CTF-MISC-流量分析】从ICMP中提取data,用CyberChef从hex转为ascii
题目网址https://www.ctfplus.cn/problem-detail/1867541909304512512/description简单流量分析不久前运维人员在日常安全检查的时候发现现场某设备会不时向某不知名ip发出非正常的ICMP PING包。这引起了运维人员的注意他在过滤出ICMP包分析并马上开始做应急处理很可能已被攻击的设备。运维人员到底发现了什么?flag形式为 flag{}工具wireshark Version 4.6.2https://www.wireshark.org/#downloadCyberChef_v10.19.4https://github.com/gchq/CyberChef/releases/tag/v10.19.4解题ip.dst 54.199.175.227提取出来124个流量包LEN(A1)CHAR(B1)CONCAT(C1:C124)Ojpcbm1vbmdvZGI6IToxNzg0MzowOjk5OTk5Ojc6OjpcbnVidW50dTokNiRMaEhSb21URSRNN0M0bjg0VWNGTEFHe3h4MmI4YV82bW02NGNfZnNvY2lldHl9Ojo::\nmongodb:!:17843:0:99999:7:::\nubuntu:666LhHRomTE$M7C4n84UcFLAG{xx2b8a_6mm64c_fsociety}::flag{xx2b8a_6mm64c_fsociety}