Skip to content Skip to navigation

Hidden message


There we got a dump of UDP packets in pcap file.

We noted that there is only 80 packets that were sent from two source ports (3400 and 3401). In the general case, we have 80 elements (that is a multiple 8), which may belong to one of two categories (source port 3400 or source port 3401)... It's looking like ascii-string presented as binary string - 80 zeros and ones.

So lets packets with source port 3400 be 1 and other packets be 0. After converting binary string to ascii we got flag Heisenberg.