Ctf Writeup

Hi there, I’m glad to see you here. In this article, we’ll solve together the “Brooklyn Nine Nine” room in TryHackme. In some sections, I’ll share brief about the subject. Don’t forget! You must always research to learn more. I hope it will be helpful for you. Let’s start! Contents: …

I had a lot of fun with this box, I felt that the vulnerabilities setup in this box were quite applicable to real world situations where human-error related misconfiguration in kerberos could spawn opportunities for any potential adversary to take advantage of the system and gain access. By leveraging a…

Some folks enjoy a nice puzzle, other folks might encounter a packed binary and feel like it’s a box of puzzles (to enjoy or cry over). For the s4x23 Cybersecurity conference I was sent a binary simply named “sample.exe” and the following questions: // Malware Packer What packer was used…

Open-Source Intelligence (or OSINT) is the practice of gathering and analyzing publically available data. The use cases in real-life applications of OSINT vary widely; from media organisations finding and verifying sources of information for stories, intelligence agencies tracking extremist groups, and APT groups gaining large masses of information during the…

TryHackMe “h4cked”( https://tryhackme.com/room/h4cked ) is a simple CTF challenge which is a combination of blue and red teaming, where you have to analyze a network traffic capture in order to find out the activities of an adversary and hack your way back in order to gain root access because the…

This is one (of many) walkthrough for the EasyPeasy CTF room. As always, I try to follow some simple enumeration steps to expose potential flaws from this article. As you will see, it was not so easy for me to solve this challenge . …

Pre Foothold Starting with an all-port nmap scan. In the meantime let’s see if it’s a webpage! Default apache page here and the Nmap is small and sad! Even when scanning for all ports we only get 80 :(

In August 2022 I had the chance to participate in an AI-themed CTF collocated with the DEF CON 30 security (hacking) conference. This was particularly interesting since it was presented in a novel format as a Kaggle competition where the leaderboard was ranked based on the points that each of…

Enumeration We will run nmap nmap -A $IP -v -o nmap.scan -p-