# VolgaCTF
We search pcap file for what it hide inside.


after that we extract files from pcap file.

For this step we use this command:


or this command:



extract detected.7z


when open the other.zip file it wants to password for to extract hide file, and we search password from each.jpg file,

but we use OutGuess tool for extract steg information.

install command: # sudo apt-get install outguess


then we have the password:


use this password for extract hide file:


after that we use gzsteg tool:

https://packetstormsecurity.com/files/21616/gzsteg.zip.html download from here and apply the instructions: https://dl.packetstormsecurity.net/crypt/stego/DOS/gzsteg.txt

use this command for gzsteg:


WE HAVE THE FLAG:


Original writeup (https://github.com/kdrypr/VolgaCTF/blob/master/Nested.md).