CTF – Page 4 – WindowsTechs.com

Not able to view a webpage or connect to a service in a vulnerable machines connected using OpenVPN, only able to perform Nmap scans

Posted on January 1, 2023 by Karan Bakshi

I’ve actually tried asking this question in hack the box forum, but nothing has worked so far.
So when I connect to a vulnerable machine using a tunneled IP using OpenVPN, all I’m able to do to a box is scan it (which is working fine), irr… Continue reading Not able to view a webpage or connect to a service in a vulnerable machines connected using OpenVPN, only able to perform Nmap scans→

Void pointer and their attribute constructor

Posted on December 22, 2022 by Haaziq Jamal

I am supposed to find the vulnerability in the code (as a part of a ctf) and I feel it’s hidden either in the __attribute__((constructor)) or the pointer.
Here I can make out that it’s a void pointer but I have never encountered a pointer … Continue reading Void pointer and their attribute constructor→

How to connect ssh without password? [closed]

Posted on December 13, 2022 by quadrop

How can i connect ssh without a password? I just have key and fingerprint.

OpenSSH9.1

SSH-2.0-OpenSSH_9.1
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLI3KDVYxrlo7g82GgzoWkCc
xm10/gYvfH0EXu/pWFm… Continue reading How to connect ssh without password? [closed]→

Would this be the right place to ask for hint/guidance regarding InfoSec ctfs/challenges?

Posted on November 26, 2022 by Alvaro

I am starting out in bung bounty training and have some need for guidance and hints towards solving some challenges and ctfs, as well as explanation on what is actually happening both in challenges I’ve solved and ones I haven’t.
Is this t… Continue reading Would this be the right place to ask for hint/guidance regarding InfoSec ctfs/challenges?→

64-bit ROP-based Buffer Overflow Attack

Posted on November 12, 2022 by justsobad

I am facing a CTF challenge in which I have to conduct an attack using a ROP chain on this program below:
#include <stdio.h>
#include <stdint.h>
#include <stdbool.h>
#include <sys/stat.h>
#include <fcntl.h>

/… Continue reading 64-bit ROP-based Buffer Overflow Attack→

Decode the data and get the flag from it [closed]

Posted on November 10, 2022 by Fractal393

A question requires you to submit a flag and our team has already
shared the flag below. However, in the process of sharing the flag,
they wanted to make sure the confidentiality is intact, so they
encoded it somehow. They consulted the c… Continue reading Decode the data and get the flag from it [closed]→

Flask URL Vulnerabilities

Posted on November 10, 2022 by justsobad

I am doing a CTF-style assignment and I am confronted with a web site created in Flask. This web site appears fairly unremarkable – it has 4 pages and no log-in/authentication functionality, nor does it have any input elements on any page…. Continue reading Flask URL Vulnerabilities→

Add null byte to hostname using OpenSSL

Posted on November 2, 2022 by NeverEver

I am trying to create a certificate signing request (CSR), whose CN contains a null byte. It should look something like this: CN = bad.com\0.good.com. I am using OpenSSL to create the request, but the created request only contains a 0, i.e… Continue reading Add null byte to hostname using OpenSSL→

"What is the flag that you obtained by following along? [closed]

Posted on November 1, 2022 by The nothing

https://tryhackme.com/room/defensivesecurityhq
I am stuck. I am learning through tryhackme.com. What is the answer? Help me.

Continue reading "What is the flag that you obtained by following along? [closed]→

Capture the flag game idea [closed]

Posted on October 24, 2022 by Noobie

I am currently working on my bachelor’s thesis and one of the parts of this work is making a CTF game. I’ve been trying to come up with a scenario and vulnerabilities for the last few days, but I haven’t come up with anything decent yet. S… Continue reading Capture the flag game idea [closed]→