Writeups and more
The Slingshot room hosted by TryHackMe challenges to retrace an attacker’s steps after they enumerate and compromise a web server. More details can be found here: https://tryhackme.com/room/slingshot Scenario I used TryHackMe’s AttackBox to solve this room. The task description mentions that the suspicious activity started on July 26, 2023, so the first thing I did was […]
The Cyber Apocalypse 2023 CTF hosted by Hack The Box included challenges from 10 categories like Web, Pwn, Reversing, Crypto, and Forensics. More details can be found here: https://ctf.hackthebox.com/event/details/cyber-apocalypse-2023-the-cursed-mission-821 The CTF was active from Sat, 18 March 2023, 14:00 CET to Thu, 23 March 2023, 13:59 CET. Warmup Welcome! Join our Discord Server and the CYBER APOCALYPSE […]
In case you don’t know, I create some CTF challenges myself: https://ctf.michweb.de/ I always try to make sure it is clear what the solution has to look like. If I don’t make that clear, that’s usually because the format of the flag gives away too many details about it. So you probably have seen format’s […]
The SANS Holiday Hack Challenge created by SANS (ft. KringleCon) is mainly forensics themed, very beginner-friendly, and can be played here: https://2022.kringlecon.com/ Submissions were open until January 6, 2023, but for time reasons, I only completed about half of the challenges. Tolkien Ring Wireshark Practice Task: Analyze the Wireshark file and Answer the Elf’s Questions!To […]
The GrabThePhisher CTF created by Milann SHRESTHA at cyberdefenders.org is OSINT themed and can be played here: https://cyberdefenders.org/blueteam-ctf-challenges/95 The CTF is built around a phishing kit that can be downloaded from the CTF page. Challenge Details An attacker compromised a server and impersonated https://pancakeswap.finance/, a decentralized exchange native to BNB Chain, to host a phishing kit at https://apankewk.soup.xyz/mainpage.php. The […]
The Hack The Boo CTF hosted by Hack The Box included challenges from Web, Pwn, Reversing, Crypto, and Forensics. More details can be found here: https://ctf.hackthebox.com/event/details/hack-the-boo-637 The CTF was active from Saturday, 22nd Oct @ 1 PM UTC to Thursday, 27th Oct @ 1 PM UTC. Day 1 Web/Easy – Evaluation Deck A powerful demon […]
The Mona Lisa Heist CTF created by Hacktoria is OSINT themed and can be played here: https://hacktoria.com/operations/operation-the-mona-lisa-heist/ The CTF was active in July of 2022. Mission Briefing from: dimitri-zechev@tiberianserpent.comto: agent-k@tiberianserpent.comdate: July 01, 2022, 21:00 EETsubject: Briefing “The Mona Lisa Heist” Well good evening, As you’ve probably heard in the news recently, the Mona Lisa was stolen from […]
Ich habe mich vor Kurzem etwas auf der Webseite vom deutschen BKA umgesehen und mir gedacht, ich erstelle mal ein paar OSINT-Challenges. OSINT steht für “Open Source Intelligence”, also Informationen aus öffentlich zugänglichen Quellen. Die Challenges können hier gespielt werden: https://ctf.michweb.de/challenges Kategorie: Bundeskriminalamt. Beantwortet man eine Frage richtig, werden oftmals weitere Fragen freigeschaltet. Vielleicht motiviert […]
The Operation Mare Nostrum CTF created by Hacktoria is OSINT and cryptography themed and can be played here: https://hacktoria.com/operations/operation-mare-nostrum/ The CTF was active in June of 2022. Mission Briefing from: dimitri-zechev@tiberianserpent.comto: agent-k@tiberianserpent.comdate: June 01, 2022, 21:00 EETsubject: Briefing “Opration Mare Nostrum” Hi there, I hope you’re a fan of spy novels, because the case that […]
The Downtown Murderer CTF created by Hacktoria is OSINT themed and can be played here: https://hacktoria.com/operations/operation-downtown-murderer/ The CTF was active in May of 2022. Mission Briefing from: julessharpe555@tiberianserpent.comto: tmp-agnt007@tiberianserpent.comdate: May 01, 2022, 21:00 EETsubject: Briefing “The Downtown Murderer” So bit of a different task we got on our hands this time. The local Police Department has their […]