There's a suspicious team out there called lolteam, I got my eyes on them for a while and I managed to wiretap their browser as they were changing their password. What did they change their password to?
Don't know how to open .pcapng files?
Opening up the file in Wireshark, we scan the packets and see a POST
request, which seems pretty important.
Digging around in the packet, we see the lolteam password, which also happens to be the flag.
easyctf{no,_lolteam_is_not_an_admin_account}