Jump to content
Main menu
Main menu
move to sidebar
hide
Navigation
Main page
Recent changes
Random page
Help about MediaWiki
Special pages
YawgNetWiki
Search
Search
Appearance
Log in
Personal tools
Log in
Pages for logged out editors
learn more
Contributions
Talk
Editing
Hail Satan SAO 19
(section)
Page
Discussion
English
Read
Edit
View history
Tools
Tools
move to sidebar
hide
Actions
Read
Edit
View history
General
What links here
Related changes
Page information
Appearance
move to sidebar
hide
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
===PCAP file=== I started by looking removing a lot of stuff that tends to not be helpful in pcap files: * Filter ** !(arp or icmp or dns or tls or tcp.port==443) * This cut a lot of junk out and led to a very interesting tcp stream at 4317 ** An unencrypted email from belial to zagan ** Provides a CLIENT_RANDOM string CLIENT_RANDOM 0B99673F6544001D9A7D760AFE3439747A9D6FA52AFA8EFF8C9D66698B10F8D8 A6387F8A5FB74A73663DA0BF7CBDE526237FB78C99B588411EE68FE6EDDA8A6CF3C683C03CF3A1E06EB8784BB8D4AB05 * Dropping this string into a text file and adding it to Wireshark ** (Pre)-Master-Secret log * Now we can look at TLS and TCP/443 streams! ** Stream at 4060 shows a GET Request of interest to us with the final [https://hssao12dc.com/decryptoroftheancienttexts URL]
Summary:
Please note that all contributions to YawgNetWiki may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
YawgNetWiki:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Search
Search
Editing
Hail Satan SAO 19
(section)
Add topic
