Subject address: https://buuoj.cn/challenges#%E8%A2%AB%E5%81%B7%E8%B5%B0%E7%9A%84%E6%96%87%E4%BB%B6
被偷走的文件.pcapng
See the ftp
protocol when transferring files , filter it
Follow it up
foremost
Separate
I didn’t use blasting here because I didn’t find any hints or clues for me to blast. If it was blasting, I should give some hints. . .
The result is a four-digit blast that is often done. . . .
ARCHPR
Four-digit mask blasting
password5790
Unzip to get flag
flag{
6fe99a5d03fb01f833ec3caa80358fa3}