# Overview
tshark -r captcha/captcha-2.0.pcap -qz io,phs | cat

# Export HTTP objects
tshark -r captcha/captcha-2.0.pcap --export-objects "http,captcha/http_objects" | cat

# Extract position→char pairs from responses
grep -RIn "SUBSTR(password" captcha/http_objects/home*.php \
|| sed -E "s/.*SUBSTR\(password,([0-9]+),1\).*= '(.).*/\1 \2/" \
|| sort -n > captcha/password_positions.txt

# Reconstruct the password/flag
awk '{printf "%s", $2} END {print ""}' captcha/password_positions.txt > captcha/flag.txt