Tags: tshark icmp wireshark cli 

Rating:

# Full WriteUp

Full Writeup on our website: [http://www.aperikube.fr/docs/nullcon_2018_misc2/](http://www.aperikube.fr/docs/nullcon_2018_misc2/)

-----

# TL;DR

A classic data extract via ICMP. The data extracted was a plain text file (flag.txt) inside a tar archive, inside a gzip file.

Original writeup (http://www.aperikube.fr/docs/nullcon_2018_misc2/).