My Project 2 and how I solved the problem.
By Prosper Moses
I am taking Challenge 6 with the question: “Use the capture file provided to determine r2d2's password.”
I was able to solve challenge 6 by taking the following steps:
I first downloaded the capture file, then to find the r2d2’s password, using Wireshark, I went to the downloaded capture file, right-clicked, and opened it with Wireshark.
In the “Apply a display filter…” box, I typed in ‘ frame contains “r2d2” ’ which highlighted the needed information. I then right clicked on the IP located under the ‘destination’ row, clicked on the ‘ follow ’ link, then on the ‘ TCP stream ’ this will open a TCP stream interface. Inside the TCP stream pop-up, I located the ‘ find ’ box and typed in ‘ pass ’, then clicked enter a couple of times until I saw the fonts inside the TCP stream changed to red colored fonts/text highlighting the ‘passwd’. I then scroll down a bit to locate ‘r2d2’ with the strings which appears as: r2d2:1014:dc2031e004699438aad3b435b51404ee:affe9616fbd19e3ab44447309962e477:::
See picture below:
The r2d2’s password code or strings. I highlighted that in the Wireshark TCP stream for easy identification.
Then I copied the strings or codes, splitting it into two different strings: dc2031e004699438aad3b435b51404ee and affe9616fbd19e3ab44447309962e477.
Next, I visited www.crackstation.net and pasted the codes or strings inside the box in crackstation, to decode the codes or strings, which gave the answer “ BrAve ”. See picture below:
Thank you.