That's a Lot of Fs — Flag in Ethernet Destination MAC via Custom EtherType

Filter Ethernet frames with EtherType 0xffff — the custom protocol used by this challenge — collect the destination MAC address from each matching frame, interpret the first two hex bytes as ASCII, and concatenate to reveal the flag.

January 1, 2024 · 2 min · giordii