README.md

MarketDump

Write-up author: jon-brandy

DESCRIPTION:

We have got informed that a hacker managed to get into our internal network after pivoiting through the web platform that runs in public internet. He managed to bypass our small product stocks logging platform and then he got our costumer database file. We believe that only one of our costumers was targeted. Can you find out who the customer was?

HINT:

• NONE

STEPS:

1. First, unzip the .zip file given.

RESULT

2. Let's open the file in wireshark.

RESULT

3. Let's start by follow the TCP stream.
4. Found nothing good here.

5. Let's try to filter the HTTP stream.

RESULT

6. The bottom one quite interesting.

7. Let's follow the stream.
8. Notice found unique string there.

9. Decode it using cyberchef.

RESULT

10. Got the flag!

FLAG

HTB{DonTRuNAsRoOt!MESsEdUpMarket}