Wireshark packet analysis (logs. Pcapng)
- USES Wireshark to view and analyze the logs.pcapng packet file under Kali desktop. Through analyzing the packet logs.pcapng, it finds the 9th file scanned by the malicious user directory and USES the file name as FLAG (form: [robots.txt])
flag: [star] PHP p>
- continues to view the packet file logs. Pcapng analyzes which ports the malicious user scans and USES all ports as flags (form: [port name 1, port name 2, port name 3… port name n]) from low to high
flag: [21,80,445,1433,3306,3389,500 p>