Sharing writeups of CTF challenges and Machines
Enumeration Nmap result Check FTP, SMB, and web server are open. FTP Since it allows anonymous FTP login, let’s get into the service. I enumerated directories and found the user.txt from /Users/Public/Desktop. Also, I found other files as well. I don’t know what PRTG is. But I will get these files for later use. HTTP … Read More “Hack the box – machine – Netmon (CVE-2018-9276)” »
Blue is one of the super easy machines. Enumeration Let’s nmap the target machine. Ok, the nmap result told me some useful information. First, we can see the target machine is open for SMB service. Second, the computer’s name is haris-PC. So let’s remember the computer’s name. As a next step, I googled to find … Read More “Hack the box – machine – Blue” »
At a glance, what protocol seems to be suspect in this attack? At first glance, I see many DNS protocols. There seems to be a lot of traffic between our host and another, what is the IP address of the suspect host? I filtered it to only see DNS. When I scrolled it down a … Read More “Hack the box – Sherlocks – Litter” »
Analyzing the auth.log, can you identify the IP address used by the attacker to carry out a brute-force attack? we can easily find it in the log file. 65.2.161.68 The brute force attempts were successful, and the attacker gained access to an account on the server. What is the username of this account? We can … Read More “Hack the box – Sherlocks – Brutus” »
Challenge description Can you decrypt the message and get the flag? Solution Download the zip file and unzip it. We have two files flag.enc and key.pub We are asked to decrypt the flag file using the given public key. There is a convenient tool for this kind of challenge. RsaCtfTool! Let’s first install the tool … Read More “Hack the box challenge – Weak RSA write-up” »
Challenge Description Find the password (say PASS) and enter the flag in the form HTB{PASS} Solution This challenge is reverse engineering and we are asked to find a correct password. Let’s check the file type. Now, for analysis let’s use a debugging tool. I used ida. When opening the file, choose 32-bit and Intel 80386 … Read More “Hack the box – Find The Easy Pass write-up” »
