Intro to Wireshark (PicoCTF 2022 #17 'packets-primer')

Help the channel grow with a Like, Comment, & Subscribe!
Check out the affiliates below for more free or discounted learning!

📧Contact me! (I may be very slow to respond or completely unable to)

[ChrisGreer]

Nice job John! Great Wireshark skillz my man. Woot Woot!! 👏👏 Love the "strings" function. Wow gonna use that when packet digging.

[drewzilla]

I can't get enough of these CTF challenges and more importantly, your videos explaining them. You could speed thru these and be like here's the flag ok thx bye. But that would just give the answer without any value and you take the time to explain this stuff. THANK YOU!!

[micleh]

This video is a prime example of building up knowledge to reap benefit from it.
Thanks again for the great content you provide.

[theFloxie]

Beginner CTF/ "hacking" noob here interested in forensic side of things, these videos are fantastic! Been smashing through this playlist and picoctf challenges so far and really enjoying it!
Super clear and concise explanations of the various tools and commands used, great stuff.

[catsandmountains]

Thanks dude, you helped me get my first flag!

[teodorbriceanu]

The way you explain is unbelievable....keep on going...and thank you for all your youtube content😅

[piyushsahu]

00:03 The challenge involves analyzing a pcap capture file

01:39 Packet capture file contains network data that can be analyzed using tools like Wireshark.

03:10 Wireshark provides detailed information about network packets, including IP addresses, protocols, flags, and packet contents.

04:46 Computer A and computer B establish a connection and initiate a conversation.

06:13 Wireshark has a feature to filter and display specific packets based on fields and flags.

07:50 Plain text data present in the packet capture

09:20 Running strings on network dump can help extract passwords and interesting information

10:52 Wireshark can help analyze network traffic

[PhayulDigest]

Thanks John, your walkthroughs are so awesome and very informative.

[itsanantsingh]

thanks man...really nice channel reach ++ for yt algo

[hakitajs]

In the end I think it makes more sense if you make the blank first, then show the pattern like:

strings network-dump.flag.pcap | tr -d " " | grep -oE "picoCTF{.*?}"

It's not much different, but I think it's a better view, especially if you have more messages.

Overall great video, keep it up!!!