- Extract ZIP from PCAP with Wireshark
- Open using recovered password
- Foremost to extract another ZIP archive
- zip2john and crack hash
- Open ZIP and recover flag

Video walkthrough: https://youtu.be/-cc4U1H53F8?t=3735