We have an old Windows Server 2008 instance that we lost the password for. Can you see if you can find one in this packet capture?
Solution
conversation -> tcp 1 -> follow stream
Decrypt cpassword with gpp-password
gpp-decrypt dAw7VQvfj9rs53A8t4PudTVf85Ca5cmC1Xjx6TpI/cS8WD4D8DXbKiWIZslihdJw3Rf+ijboX7FgLW7pF0K6x7dfhQ8gxLq34ENGjN8eTOI=
swampCTF{4v3r463_w1nd0w5_53cur17y}