Day 02
Open the provided pcap, we can find many ftp connections. Grep for PASV leads to a valid login:

Therefore the compromised account is found.
Open the provided pcap, we can find many ftp connections. Grep for PASV leads to a valid login:

Therefore the compromised account is found.