initial commit

traffic-analysis/twilight-zone-transfer/README.md

@@ -0,0 +1,22 @@
+# Twilight Zone Transfer
+
+**Category:** Traffic Analysis
+
+**Points:** 50
+
+## Description
+
+\<iframe src="" style="background-image: url('https://deadface.sfo3.cdn.digitaloceanspaces.com/2026/img/wayfinder/twilight_zone_transfer.png');background-size:cover;background-position:center center;background-origin:content-box;background-repeat:no-repeat;background-color:rgba(40, 40, 40,0);min-height:80px;height:130px;width:100%;padding:10px;border:none" title="Thumbnail">\</iframe>
+\<sup>Created By: \<code>@RP-01?\</code>\</sup>
+
+A misconfigured DNS server allowed an unauthorized zone transfer (AXFR). The attacker enumerated hostnames, then pulled the ENTIRE zone in one request. The capture already contains that transfer, find it and read the records.
+
+Submit the flag with the dog's name as: `deadface{flag-text}`
+
+## Services
+
+- [https://deadface.sfo3.cdn.digitaloceanspaces.com](https://deadface.sfo3.cdn.digitaloceanspaces.com)
+
+## Attachments
+
+- [PCAP04.pcap](files/PCAP04.pcap)