From 5f751d9b9ab06272f84447d35e7d9c7d8bd38bb1 Mon Sep 17 00:00:00 2001
From: "nuo.o" <49533950+nuoxoxo@users.noreply.github.com>
Date: Sat, 16 Nov 2024 20:28:58 +0100
Subject: [PATCH 1/5] Update README.mdx

---
 level02/README.mdx | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/level02/README.mdx b/level02/README.mdx
index 2460b3e..f8ba4ca 100644
--- a/level02/README.mdx
+++ b/level02/README.mdx
@@ -4,10 +4,42 @@
   - `realpath` - get the full absolute filepath
   - `scp` - secure copy - `scp username@ip:path _local_`
   - `~.pcap` - a Packet Capture to store network packet data captured during network traffic monitoring
+
 ```b
+### VM
 > ls -l
 ----r--r-- 1 flag02 level02 level02.pcap
 ^ which means a regular file
 
 > scp -P 4242 level02@192.168.X.X:/home/user/level02/level02.pcap $(pwd)
+
+### Host
+> hexdump -C level02.pcap 
+> xxd level02.pcap 
+> xxd level02.pcap | grep -i pass -A10 -B10
+> xxd level02.pcap | cut -d ' ' -f2-9 | tr -d ' ' 👈 get midfields
+```
+
+- use Wireshark 
+  - _Analyze - Follow - TCP Stream_ - copy _TCP Stream_ to text
+
+```py
+infile = [[n[-2], n[-1]] for n in [_.split() for _ in open(0).read().split('\n') if len(_.split()) == 3]]
+res = ''
+for i, line in enumerate(infile):
+    print('line/', line, 'i/', i)
+    l, r = line
+    if l == '7f': res = res[:-1]
+    elif r != '.': res += r
+    else: assert(l == '0d')
+print('res/', res)
+
+# ft_waNDReL0L
 ```
+
+# 02 - token
+
+> su flag02
+Password: ft_waNDReL0L
+> su level03
+> Password: kooda2puivaav1idi4f57q8iq

From 07180faa1184fac2ecedc3c6a44a2d3675ac1b59 Mon Sep 17 00:00:00 2001
From: nuoxoxo <nuoxoxo@users.noreply.github.com>
Date: Sat, 16 Nov 2024 19:29:17 +0000
Subject: [PATCH 2/5] show READMEs daily

---
 README.mdx | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/README.mdx b/README.mdx
index c7cb41d..1555050 100644
--- a/README.mdx
+++ b/README.mdx
@@ -98,11 +98,43 @@ Password: abcdefg
   - `realpath` - get the full absolute filepath
   - `scp` - secure copy - `scp username@ip:path _local_`
   - `~.pcap` - a Packet Capture to store network packet data captured during network traffic monitoring
+
 ```b
+### VM
 > ls -l
 ----r--r-- 1 flag02 level02 level02.pcap
 ^ which means a regular file
 
 > scp -P 4242 level02@192.168.X.X:/home/user/level02/level02.pcap $(pwd)
+
+### Host
+> hexdump -C level02.pcap 
+> xxd level02.pcap 
+> xxd level02.pcap | grep -i pass -A10 -B10
+> xxd level02.pcap | cut -d ' ' -f2-9 | tr -d ' ' 👈 get midfields
+```
+
+- use Wireshark 
+  - _Analyze - Follow - TCP Stream_ - copy _TCP Stream_ to text
+
+```py
+infile = [[n[-2], n[-1]] for n in [_.split() for _ in open(0).read().split('\n') if len(_.split()) == 3]]
+res = ''
+for i, line in enumerate(infile):
+    print('line/', line, 'i/', i)
+    l, r = line
+    if l == '7f': res = res[:-1]
+    elif r != '.': res += r
+    else: assert(l == '0d')
+print('res/', res)
+
+# ft_waNDReL0L
 ```
 
+# 02 - token
+
+> su flag02
+Password: ft_waNDReL0L
+> su level03
+> Password: kooda2puivaav1idi4f57q8iq
+

From c72ee63c3691133682dd45a0855c48f8c5d1b4a9 Mon Sep 17 00:00:00 2001
From: "nuo.o" <49533950+nuoxoxo@users.noreply.github.com>
Date: Sat, 16 Nov 2024 20:29:48 +0100
Subject: [PATCH 3/5] Update tokens.mdx

---
 tokens.mdx | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tokens.mdx b/tokens.mdx
index 6968d02..baa4f56 100644
--- a/tokens.mdx
+++ b/tokens.mdx
@@ -1,6 +1,10 @@
 ```b
 flag00  nottoohardhere 
 level01  x24ti5gi3x0ol2eh4esiuxias
+
 flag01  abcdefg
 level02  f2av5il02puano7naaf6adaaf
+
+flag02  ft_waNDReL0L
+level03  kooda2puivaav1idi4f57q8iq
 ```

From 750b473bbc1b206f243e3c5cfc5017e8eefabed6 Mon Sep 17 00:00:00 2001
From: nuoxoxo <nuoxoxo@users.noreply.github.com>
Date: Sat, 16 Nov 2024 19:30:05 +0000
Subject: [PATCH 4/5] show READMEs daily

---
 README.mdx | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.mdx b/README.mdx
index 1555050..98a302f 100644
--- a/README.mdx
+++ b/README.mdx
@@ -1,8 +1,12 @@
 ```b
 flag00  nottoohardhere 
 level01  x24ti5gi3x0ol2eh4esiuxias
+
 flag01  abcdefg
 level02  f2av5il02puano7naaf6adaaf
+
+flag02  ft_waNDReL0L
+level03  kooda2puivaav1idi4f57q8iq
 ```
 
 

From ee87ffd40c0728da113e7b7d07adaba77050b184 Mon Sep 17 00:00:00 2001
From: "nuo.o" <49533950+nuoxoxo@users.noreply.github.com>
Date: Sat, 16 Nov 2024 20:30:36 +0100
Subject: [PATCH 5/5] Update README.mdx

---
 level02/README.mdx | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/level02/README.mdx b/level02/README.mdx
index f8ba4ca..189578b 100644
--- a/level02/README.mdx
+++ b/level02/README.mdx
@@ -39,7 +39,9 @@ print('res/', res)
 
 # 02 - token
 
+```b
 > su flag02
 Password: ft_waNDReL0L
 > su level03
 > Password: kooda2puivaav1idi4f57q8iq
+```