SOC Web Attack Challenge – HTTP Basic Auth PCAP Analysis (LetsDefend)
SOC-style walkthrough of the LetsDefend web attack challenge
focused on HTTP Basic Authentication analysis using a PCAP file.
Scenario:
Alert indicated a possible web-based attack
Network traffic provided in a PCAP file for analysis
Investigation performed using Wireshark
Analysis steps included:
Reviewing HTTP GET request volume
Identifying server operating system
Determining web server software and version
Identifying OpenSSL version in use
Extracting client user-agent information
Recovering HTTP Basic Authentication credentials
This video demonstrates practical PCAP analysis,
web protocol investigation, and credential exposure
identification expected of a SOC analyst.
For educational and defensive security purposes only.
#SOC
#LetsDefend
#WebSecurity