slug: xored_ftp
title: "XORed FTP"
description: "Elf Bob wants to send a file containing confidential information to his bestie elf alice. Little his knows is that he uses insecure FTP and Grinch is eavesdropping on the connection. However, Bob is a bit more cautious this time and XORs the file with a key before sending it over FTP. Can you help Eve recover the original file and find the flag hidden inside?"
category: "networking"
points: 700
is_visible: true
complexity: 7
attachments:
  - "dump.pcapng"
flag_plaintext: "EntySec{x0r3d_f1l3_0v3r_ftp_1s_s3cur3}"
hints:
  - text: "FTP password is the same password as for the file."
    penalty_points: 10
  - text: "File is encrypted using one-time pad."
    penalty_points: 20