Network Sniffing

This issue should be fixed now.

Ok its working be sure and copy the full id.

1 Like

This is still not working. I tried this multiple times, tried clearing the Cache too. Admin, kindly fix the issue !

Hi @JosephWhite – any chance you can work magic again?
I’ve been capturing traffic for ~20 minutes and haven’t seen any HTTP traffic.

thanks!

FWIW – I’m experiencing this in the 1.2 guided exercise.

I exited and refreshed the lab. Either the admin got it working, or turning it off and on again was enough.


there’s an issue happening when I follow the tcp stream for the HTTP, there is no session key any where

Be sure you are doing your work in the Node:h1 terminal window.

thank you soo much for your response.

I did the same but the session key is still not visible

Please show the contents of the Node:h1 window with all your commands.



Yes please, i’ve attached screenshots of my nodeh1 and wireshark window

Hello Joseph, Hope you are doing well. the network sniffing lab has many issues even with its challenge part I have managed to to access the channel and am sending my query “I forgot my password to lybrary” but bot isn’t replying the expected response which must should be a hint or password

Hey BoilingDeer!

I just took a run through the Challenge and was able to retrieve the password. The IRC user hroark is the one who should respond to your question. Can you confirm they’re present in that channel you joined? See screenshot.

Yesterday, when I accessed that lab, Hroark was not there, but today when I accessed it, he was there and replied with the password.

thank you :heart:

1 Like

Same issue here. I’m doing everything in node: h1 terminal, but when following the TCP stream, there’s no session cookie.

hroark keeps asking who are you and saying no this is Wendy’s, no, this is Patrick. I tried restarting the lab but he only responds when i give a different nickname than what I found.

Hey @ghost01,

Were you able to make it through? Those responses indicate that you haven’t logged in as the correct user. Recall that you must enter the channel as the user you identified in the SMB2 traffic.

Happy hacking!

Hi,

Same problem as many, no session cookie found in the http stream, i guess it expired, can a new session cookie be setup ?

Hey @Hoele

Thanks for bringing this to our attention! I’m happy to say there are no cookie expiry issues here (only because that was an annoying problem…). The actual issue here is much more straightforward - I failed to include the cookie in every request, and you happened to get unlucky in following one of those cookie-less streams.

I’ve resolved that issue now, so this lab should be bulletproof :slight_smile: Let me know if you discover otherwise.

Happy hacking!