Want to run this Docker container locally?

 docker run -p 3222:5000 --restart always -d --name wireshark-login joshbeck2024/ctf-wireshark-login

You are given a network capture file along with the sign-in page.

• Open it in Wireshark and filter by port == 3222 (This is the port our website is running on.)

Filter by tcp.port == 3222

Right-click on the GET request /dashboard and follow the HTTP stream.

Copy the auth cookie value seen at the top

Insert it into your browser auth=COOKIE_VALUE

• This will give us access to the /dashboard endpoint that has the flag.