Rating:

# UTCTF 2022 Baby Shark P2 (Category: Beginner)
The challenge is the following,

![Figure 1](img/challenge.png)

Here, we are given the file [baby_shark2.pcap](./baby_shark2.pcap).
The challenge description says `I was able to capture some ftp traffic in this pcap. I wonder if there is any good info here.`, so we will look at the ftp traffic.

Opening this up on Wireshark shows the following,

![Figure 2](img/flag.png)

FTP packet 19 shows,

`PASS utflag{sharkbait_hoo_ha_ha}`

Therefore, the flag is,

`utflag{sharkbait_hoo_ha_ha}`

Original writeup (https://github.com/LambdaMamba/CTFwriteups/tree/main/UTCTF_2022/beginner/baby_shark_p2).