PCAP 19

To start this lab, you need to install Wireshark to inspect the provided network dump. You can download the PCAP file from the provided link. The file contains a single HTTP request, and our task is to extract the key from the Authorization header, which uses a Bearer token in the JWT format.

The JWT consists of three parts: the header, payload, and signature, separated by dots. The payload is base64 encoded and contains the key we need. By opening the PCAP file in Wireshark, we can follow the TCP stream to reconstruct the connection and inspect the data. Decoding the payload will reveal the key required for this exercise.