🟩Someone Not Use HTTPS

FORENSICS | investigate PCAPs, metadata, and memory to get the full story | EASY

This flag is about knowing something about the difference between HTTP and HTTPS and then knowing how to look at a PCAP.

HTTP (Hypertext Transfer Protocol) and HTTPS (Hypertext Transfer Protocol Secure) are both protocols used for transferring data over the internet. The key difference is that HTTPS includes a security layer using SSL/TLS encryption, providing data integrity, authentication, and confidentiality, unlike HTTP which transmits data in plaintext. This makes HTTPS more secure and is the preferred protocol for transmitting sensitive information such as passwords and payment details.

Hints

Wireshark is a great tool for looking at all of the packets sent across a network and if they aren't being encrypted it will put them together for you and you can view that traffic.

Solutions

https://www.youtube.com/watch?v=fd372T1FvFo&list=PLFuCtJnW6S5iSDjIFa2QAjWi7BcKJBJhm