Collaborate Disseminate
I am doing CTF ‘Skynet’ from THM and came across this problem.
Enumerating SMB, I gathered credentials ‘milesdyson’ and a list of passwords ‘log1.txt’.
I figured that I could try to brute force squirrelMail login form using Hydra. This is … Continue reading Hydra says different passwords with are correct each run, but only one works
In this challenge, An unauthorized admin panel available to give you the FLAG.
Application URL: https://ctf2-804e8.web.app/
FLAG Format : FLAG{Dyygsys653TwfctwE}
I’m doing a CTF challenge and would appreciate some help. The summary for the challenge:
Employees were obligated to back up their data. The backup occurred at
the end of each day to a shared area located in /var/backups.
Since you could … Continue reading Finding a vulnerability that can compromise the admin account for CTF [closed]
In a CTF, I want to attack a Bluekeep vulnerable machine over the internet using metasploit, but the problem is my Kali machine (attacker) is not exposed to the internet, so the vulnerable machine cannot send me back a reverse shell.
So I … Continue reading Pivoting over internet [closed]
I have been set on a mission by a friend to try and find a way to decrypt any/all of these strings:
4,2,c19db5de982f4595ae761bd9d998ce89,CHWK,19cd5ac9,19d6438f,1df,0,RvNWdl15V8MQv14/SgGwcpy1KIY=
4,2,3814b2e789a24b4f8135eff81a730a85,CHWK,1… Continue reading What’d be the best way to find out how to decrypt/un-encode parts of ciphertext? [closed]
Working on a CTF challenge and the coordinators hint suggests that one of the vectors to inject shellcode is via pathing. Looking at debugging prints does show the cwd and filename are passed onto the stack and a quick test shows creating … Continue reading Encoding shellcode to hide in filename / directory
(This is a question regarding a challenge in a wargame on overthewire.org called Narnia similar to Shellcode does not execute as the owner )
When exporting shellcode to EGG environment variable
export EGG=`python3 -c "import sys; sys…. Continue reading Exporting shellcode to environment variable doesn’t work as expected
Here is the elf summary of the program:
Arch: amd64-64-little
RELRO: Partial RELRO
Stack: No canary found
NX: NX enabled
PIE: No PIE (0x400000)
This is the main function of the disassembly of the p… Continue reading Trying to ret2text on 64bit program issues, can’t jump to shell
I started noticing this kind of token in a lot of CTF tasks from different authors:
eyJlbWFpbCI6ImVtYWlsQG1haWxib3guZG9tYWluIiwiaWQiOjN9.ZLNCAQ.MxwKVKj_dramWyfT5XxT6g9U3xk
The structure is as follows:
Payload (usually a json string). In m… Continue reading What type of token is this?
I am currently participating in a CTF Challenge and have reached a stage where I discovered a "log_admin" page. This page generates a cookie that is encrypted using AES 128 ECB. I obtained this information by retrieving the page’… Continue reading AES ECB cookie bypass