The Forest

SCENARIO

A legacy file-transfer server has been running quietly on the network for years. Nothing about it looks unusual. The traffic it generates follows standard protocol, the commands are formatted correctly, and the exchanges complete without errors.

During routine monitoring, this packet capture was collected. At first glance, it is exactly what you would expect from a file-transfer system doing its job. But someone with a reason to look closer flagged it for review.

Your job is to go through the capture, understand what the system is doing at the protocol level, and figure out whether something is being communicated that was never meant to be visible.

The answer is in the traffic. You just have to know what to look for.

Flag format: flag{}

Infrastructure

- Downloadable File

Provided Files

- The_Forest (54.9 KB)