We are given a pcap with the traffic generated to an old version of http://polictf.it
. We can use NetworkMiner or similar tools to extract all files and compare them with the originals. logo.png
differs from original and using StegoSolve we can find the secret flag: