$#network-forensics

Hacker Holidays — Day 4: Packed Light

A PCAP shows a covert channel exfiltrating one byte per HTTP request inside a Cookie header — base64 plus a single-byte XOR, broken instantly with a known-plaintext crib on the flag format.

• #hacker-holidays
• #forensics
• #network-forensics