---
# System prepended metadata

title: PcapPoisoning-100pt
tags: [picoCTF, picoCTF2023, Forensics, 從零開始的 picoCTF]

---

# PcapPoisoning-100pt
[題目在這](https://play.picoctf.org/practice/challenge/362?originalEvent=72&page=1)
## 題意
![](https://i.imgur.com/PuxihWK.png)


## 解題思路
將檔案下載後發現是 pcap 檔，打開 wireshark

![](https://i.imgur.com/liTpz65.png)

將檔案開啟

![](https://i.imgur.com/czS5lrn.png)


利用 filter 來找 flag，喔吼~右下那個訊息 OVO

![](https://i.imgur.com/EMKhGaA.png)



## 困難之處
原來要加上 contains...我想說收 pico 怎麼找不到Orz


Date : 2023/04/07
###### tags: `picoCTF2023` [`從零開始的 picoCTF`](https://hackmd.io/-KQeDuzrQMOcFNhwU_5eKA?both=) `picoCTF` `Forensics`