SHARK — PACKET & PCAPNG INSPECTOR

In-Browser Wireshark Suite

Dissects PCAP & PCAPNG captures (Ethernet, ARP, IPv4/IPv6, TCP, UDP, ICMP, HTTP, DNS), reconstructs TCP/UDP streams, and hunts CTF flags.

Showing 6 / 6 packets (PCAP)

Auto-Detected CTF Flags & Cleartext Credentials (2)

Exported HTTP Objects (2)

Reassembled like Wireshark's Export HTTP Objects. Download the file or open it in Chef.

login

application/x-www-form-urlencoded · 27 B · MD5 4308a0e94fe7d0516fdfbfdb101c59e9 · packet #4

login

application/json · 67 B · MD5 a51e4db779ce5733c10550a63bfde827 · packet #5

Packet List (6)
No.Time (s)SourceDestinationProtoLenInfo
10.000010.10.14.25192.168.56.80TCP5451422 → 80 [SYN] Seq=1000 Win=8192 Len=0
20.0120192.168.56.8010.10.14.25TCP5480 → 51422 [SYN, ACK] Seq=5000 Win=8192 Len=0
30.024010.10.14.25192.168.56.80TCP5451422 → 80 [ACK] Seq=1001 Win=8192 Len=0
40.045010.10.14.25192.168.56.80HTTP302POST /admin/login HTTP/1.1
50.0880192.168.56.8010.10.14.25HTTP245HTTP/1.1 200 OK
60.110010.10.14.25192.168.56.80TCP5451422 → 80 [ACK, FIN] Seq=1249 Win=8192 Len=0

Packet #4 — Protocol Dissection

Arrival Time:1729790000.045000 s
Frame Length:302 bytes
Capture Length:302 bytes
Destination MAC:00:16:3e:aa:bb:cc
Source MAC:00:16:3e:11:22:33
EtherType:0x0800
Source Address:10.10.14.25
Destination Address:192.168.56.80
Header Length:20 bytes
Total Length:288 bytes
TTL:64
Protocol:6 (TCP)
Source Port:51422
Destination Port:80
Sequence Number:1001
Acknowledgment Number:5001
Header Length:20 bytes
Flags:0x18 (ACK, PSH)
Window Size:8192
TCP Payload:248 bytes
Request / Status Line:POST /admin/login HTTP/1.1
Host:portal.cybercalc.ctf
User-Agent:Mozilla/5.0 (CTF-Student-Lab)
Authorization:Basic YWRtaW46aHVudGVyMl9jdGZfa2V5
Content-Type:application/x-www-form-urlencoded
Content-Length:29
Body:username=admin&otp=73319042

Hex & ASCII Packet Bytes (302 B)

000000 16 3e aa bb cc 00 16 3e 11 22 33 08 00 45 00..>.....>."3..E.
001001 20 13 37 40 00 40 06 00 00 0a 0a 0e 19 c0 a8. .7@.@.........
002038 50 c8 de 00 50 00 00 03 e9 00 00 13 89 50 188P...P........P.
003020 00 00 00 00 00 50 4f 53 54 20 2f 61 64 6d 69 .....POST /admi
00406e 2f 6c 6f 67 69 6e 20 48 54 54 50 2f 31 2e 31n/login HTTP/1.1
00500d 0a 48 6f 73 74 3a 20 70 6f 72 74 61 6c 2e 63..Host: portal.c
006079 62 65 72 63 61 6c 63 2e 63 74 66 0d 0a 55 73ybercalc.ctf..Us
007065 72 2d 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6cer-Agent: Mozill
008061 2f 35 2e 30 20 28 43 54 46 2d 53 74 75 64 65a/5.0 (CTF-Stude
00906e 74 2d 4c 61 62 29 0d 0a 41 75 74 68 6f 72 69nt-Lab)..Authori
00a07a 61 74 69 6f 6e 3a 20 42 61 73 69 63 20 59 57zation: Basic YW
00b052 74 61 57 34 36 61 48 56 75 64 47 56 79 4d 6cRtaW46aHVudGVyMl
00c039 6a 64 47 5a 66 61 32 56 35 0d 0a 43 6f 6e 749jdGZfa2V5..Cont
00d065 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63ent-Type: applic
00e061 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6dation/x-www-form
00f02d 75 72 6c 65 6e 63 6f 64 65 64 0d 0a 43 6f 6e-urlencoded..Con
010074 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 0dtent-Length: 29.
01100a 0d 0a 75 73 65 72 6e 61 6d 65 3d 61 64 6d 69...username=admi
01206e 26 6f 74 70 3d 37 33 33 31 39 30 34 32 n&otp=73319042