Day 14

forensic/hidden-streams

Hidden Streams

Category: forensic

TODO

forensic/keyboard-junkie

Keyboard Junkie

Author: n nalo_
Category: forensic

https://github.com/TeamRocketIst/ctf-usb-keyboard-parser

$ tshark -r ./keyboard_junkie.pcap -Y 'usb.capdata && usb.data_len == 8' -T fields -e usb.capdata | sed 's/../:&/g2' > usbPcapData
$ cd ctf-usb-keyboard-parser
$ python usbkeyboard.py ../usbPcapData
so the answer is flag{REDACTED} hahahah lol