web/y2j
Y2J
- Category
-
web
TODO
forensic/backdoored-splunk-ii
Backdoored Splunk II
- Category
-
forensic
TODO
Table of Contents
Subposts
- Day 3
- warmup/cattle
- forensic/nightmare-on-hunt-street
- Challenge 1: What is the IP address of the host that the attacker used?
- Challenge 2: How many times was the compromised account brute-forced?
- Challenge 3: What is the name of the offensive security tool that was used to gain initial access?
- Challenge 4: How many unique enumeration commands were run with net.exe?
- Challenge 5: What password was successfully given to the user created?
- malware/russian-roulette
- Day 13
- forensic/obfuscation-station
- forensic/little-shop-of-hashes
- Challenge 1: What is the name of the service that the attacker ran and stopped, which dumped hashes on the first compromised host?
- Challenge 2: What lateral movement technique did the threat actor use to move to the other machine?
- Challenge 3: What is the full path of the binary that the threat actor used to access the privileges of a different user with explicit credentials?
- Challenge 4: How many accounts were compromised by the threat actor?
- Challenge 5: What is the full path of the binary that was used as a callback to the threat actor’s machine?
- Day 17
- warmup/the-void
- misc/linux-basics
- Question 0: What’s your home directory?
- Question 1: Search the man pages. What command would you use to generate random permutations?
- Question 2: On what day was /home/user/myfile.txt modified? Use the date format 2019-12-31
- Question 3: How big is /home/user/myfile.txt, in kilobytes? Round to the nearest whole number.
- Question 4: What user owns the file /home/user/myfile.txt
- Question 5: What’s the 3-digit octal permissions of the file /home/user/myfile.txt? (e.g 777)
- Question 6: What is the user id of ‘admin’?
- Question 7: There is a user ‘john’ on the system. Can they write to /home/user/myfile.txt? (yes/no)
- Question 8: Can the ‘admin’ user execute /home/user/myfile.txt? (yes/no)
- Question 9: Which user on the system, except for you, root, admin and john, can execute /home/user/myfile.txt?
- Question 10: /home/user/myfile.txt looks like a txt file, but it actually isn’t. What kind of file is it?
- pwn/baby-buffer-overflow-32bit
- web/moveable
- Huntress CTF 2024 1 min read (33 min read total)
- Day 1 3 min readDay 2 1 min readDay 3 5 min readDay 4 1 min readDay 5 1 min readDay 6 2 min readDay 7 1 min readDay 8 5 min readDay 9 3 min readDay 10 1 min readDay 11 1 min readDay 12 1 min readDay 13 2 min readDay 14 1 min readDay 15 2 min readDay 16 2 min readDay 17 4 min readDay 18 1 min readDay 19 1 min readDay 20 1 min readDay 21 1 min read