Thoughts, tools and walkthroughs for CTF
Box just got retired. For the points it gets on HTB.eu, I found it quite challenging… Enumeration As always, nmap to get going: We got HTTP (80), SSH (22) and some weird sun-answerbook port (8888). Lets try browsing the site. Looks like we need to find Waldo :). I initially got stuck here. Nothing seemed… Read more Waldo – Hackthebox.eu
This box requires you to fumble around with SSL and .enc files. Takes some bruteforcing and luck… Enumeration Nmap ftw. So we have HTTP (80), SSH (22), FTP (21), HTTP H2 database (8082) and some random stuff (5435, 9092). Lets start by browsing the FTP port. What you see above is that I connected to… Read more Hawk – Hackthebox.eu
I had so much fun with this recently retired box. My skill set with Active Directory was lacking, so this was quite a learning experience! Enumeration Nmap baby, Nmap: Wow, thats a lot of ports. From the inital scan, we can safely say that we are dealing with a Windows machine here. A couple of… Read more Active – Hackthebox.eu
Finally had time to do another Vulnhub machine. Fowsniff looked fun and a friend of mine recommended it due to the Twitter component, so lets get started! Enumeration As always, lets start with an nmap: So we have HTTP (80), SSH (22) and POP3 (110). Browsing the site indicates that Fowsniff sites has been compromised… Read more Vulnhub – Fowsniff 1
Site just retired, focussed on Tomcat and malicious WAR files! Lets get started. Enumeration As always, lets Nmap the box: Initial scan shows that a site is running at 8080 and that it is probably a Tomcatsite. Lets’s connect: Yep. Thats Tomcat alright. Lets start gobuster to see what dirs we can find: That /manager… Read more Jerry – Hackthebox.eu
Great box over at hackthebox.eu, which learned me a nifty new trick. Lets get started! Enumeration As always, we start with a full nmap scan: So we have port 80 running a HTTP service and port 22 running SSH. Browsing to webpage displays the following: We can run the following commands: Sites to be tested: ini.php,… Read more Poison – Hackthebox.eu
Being noted as one of the easiest boxes on Hackthebox, I never got around to doing it, since it was already archived when I first joined. It just re-entered circulation as a retired box, I still can get a crack at this one. Lets have a look! Enumeration I fired up trusty nmap to get… Read more Blue – Hackthebox.eu
One of the boxes that started me on my journey into CTF’s. Strictly a beginners box, this one can be done without an intermediate techniques, such as reverse shells. The box can be found on Vulnhub. Let’s get started. Enumeration That’s a lot of sevices. To sum it up: 22/tcp open ssh OpenSSH 6.6.1p1 Ubuntu… Read more Lazy Sysadmin 1 – Vulnhub
This box was just retired on Hackthebox.eu. It involves getting to exploit the infamous achat application. Lets see how to get root on this machine! Enumeration As always, we start with an nmap scan: The -sU triggers all scripts nmap has against found services , while -sV probes open ports to determine which service/version is… Read more Chatterbox – Hackthebox.eu
Did this (now retired) box a while back on Hackthebox.eu. Really digged the IoT style of this box. Gave me an option to explore some new venues. This box was quite easy in compared to some of the others. Lets get started. Enumeration As always, I start my enumeration by kicking off nmap against this… Read more Mirai – Hackthebox.eu