FTP Flag - KnightCTF 2022

Posted on by 0xt4req

As it says FTP Flag, it means the flag is definitely in the FTP stream.

Open the file in wireshark. Apply FTP filter. Follow the streams, you'll see that there is a flag.txt file there.

image1

After following some streams, you'll see a base64 encoded text. Decode it & you'll get the flag.

image2

Decoded Data:

image3

Hope you like it. See ya.