FTP Flag - KnightCTF 2022

Posted on by 0xt4req

As it says FTP Flag, it means the flag is definitely in the FTP stream.

Open the file in wireshark. Apply FTP filter. Follow the streams, you'll see that there is a flag.txt file there.


After following some streams, you'll see a base64 encoded text. Decode it & you'll get the flag.


Decoded Data:


Hope you like it. See ya.