Scenario
You are monitoring a corporate network segment using a packet analyser. An employee on the network has just authenticated to an internal server using Telnet — an unencrypted protocol that transmits all data, including passwords, in plaintext.
Your task is to intercept the credentials from the packet capture, use them to access the remote server, retrieve a classified document, and submit the embedded flag to complete the engagement.
Objectives
1
Start the packet capture in PacketScope Pro and identify the suspicious Telnet packet.2
Follow the TCP stream to read the plaintext session and extract the credentials.3
Use the credentials to log in to the remote server via Terminal.4
Navigate the filesystem and read Critical.txt.5
Copy the flag from the bottom of the file and submit it via the Incident Report.
Key Concept
Telnet transmits all data in plaintext — usernames, passwords, and file contents are fully readable by anyone on the network. This is why Telnet has been replaced by SSH in secure environments.