Tags: misc tcpdump 

Rating:

# ws2
### Category: misc
### Description:
No ascii, not problem :)

[recording.pcapng](recording.pcapng)
### Author: JoshDaBosh

### Solution:
Analyzing the tcp dump we can observe that there has been a jpeg upload
![http](http-traffic.png)
let's extract it via wireshark
![flag](flag.jpg)
### Flag:
```
actf{ok_to_b0r0s-4809813}
```

Original writeup (https://github.com/r00tstici/writeups/blob/master/angstromCTF_2020/ws2/README.md).