Rating: 0

See http://jtwp470.hatenablog.jp/entry/juniors-ctf

I saw a dump pcap file to use Wireshark. I found the fact:

  • SSH connection between and Port number is 38574.
  • is alive via VPN.
  • Download .ssh/id_rsa ;)
  • See passwd: I think this is /etc/passwd. and found a user: hirsch.
So, I guess I need to connect to use SSH and .ssh/id_rsa

$ ssh -i ./id_rsa -p 38574 hirsch@


Connection to closed.

Gotcha. I got a flag.

Flag: The_third_season_was_sold_to_the_aliens