BMZCTF：2018 HEBTUCTF 你可能需要一个wireshark

http://bmzclub.cn/challenges#2018%20HEBTUCTF%20%E4%BD%A0%E5%8F%AF%E8%83%BD%E9%9C%80%E8%A6%81%E4%B8%80%E4%B8%AAwireshark

youjun.pcapng打开直接尝试搜索关键字

tcp contains "flag"

追踪流找到一个flag.txt

解码这串base64得到flag

PS C:\Users\Administrator> php -r "var_dump(base64_decode('SEVCVFVDVEYlN0JmMWFnXzFzX3czbl9kNG8lN0Q='));"
Command line code:1:
string(29) "HEBTUCTF%7Bf1ag_1s_w3n_d4o%7D"
PS C:\Users\Administrator> php -r "var_dump(urldecode('HEBTUCTF%7Bf1ag_1s_w3n_d4o%7D'));"
Command line code:1:
string(25) "HEBTUCTF{f1ag_1s_w3n_d4o}"
PS C:\Users\Administrator>