Knowledge Hub

NetworkMiner

TryHackMe25 answered prompts

NetworkMiner TryHackMe walkthrough with 25 answered prompts and lab methodology notes.

Prompts and answers

  • What is the total number of frames?
    460
  • How many IP addresses use the same MAC address with host 145.253.2.203?
    2
  • How many packets were sent from host 65.208.228.223?
    72
  • What is the name of the webserver banner under host 65.208.228.223?
    Apache
  • What is the extracted username?
    #B\Administrator
  • What is the extracted password?
    $NETNTLMv2$#B$136B077D942D9A63$FBFF3C253926907AAAAD670A9037F2A5$01010000000000000094D71AE38CD60170A8D571127AE49E00000000020004003300420001001E003000310035003600360053002D00570049004E00310036002D004900520004001E0074006800720065006500620065006500730063006F002E0063006F006D0003003E003000310035003600360073002D00770069006E00310036002D00690072002E0074006800720065006500620065006500730063006F002E0063006F006D0005001E0074006800720065006500620065006500730063006F002E0063006F006D00070008000094D71AE38CD6010...
  • What is the name of the Linux distro mentioned in the file associated with frame 63075?
    CentOS
  • What is the header of the page associated with frame 75942?
    Password-Ned AB
  • What is the source address of the image "ads.bmp.2E5F0FD9.bmp"?
    80.239.178.187
  • What is the frame number of the possible TLS anomaly?
    36255
  • Look at the messages. Which platform sent a password reset email?
    Facebook
  • What is the email address of Branson Matheson?
    branson@sandsite.org
  • Which version can detect duplicate MAC addresses?
    2.7
  • Which version can handle frames?
    1.6
  • Which version can provide more details on packet details?
    1.6
  • What is the OS name of the host 131.151.37.122?
    Windows - Windows NT 4
  • How many data bytes were received from host 131.151.32.91 to host 131.151.37.122 through port 1065?
    192
  • How many data bytes were received from host 131.151.37.122 to host 131.151.32.21 through port 143?
    20769
  • What is the sequence number of frame 9?
    2AD77400
  • What is the number of the detected "content types"?
    2
  • What is the USB product's brand name?
    ASIX
  • What is the name of the phone model?
    Lumia 535
  • What is the source IP of the fish image?
    50.22.95.9
  • What is the password of the "homer.pwned.se@gmx.com"?
    spring2015
  • What is the DNS Query of frame 62001?
    pop.gmx.com