CTF

A collection of 66 posts

picoCTF

PicoCTF - repetitions

Can you make sense of this file? First, download the required file (enc_flag). The file is formatted in the base64 format. We need to decode it multiple times in order to get the flag. Here is the Python code that does just that. If you want to learn more

Hack The Box Featured

Hack The Box - Synced

💡Task 1 What is the default port for rsync? First, as usual, run the following command in the terminal to scan the target machine for open ports using Nmap. nmap -sV -p- IP_ADDRESS Starting Nmap 7.80 ( https://nmap.org ) at 2023-06-15 14:37 EEST Stats: 0:00:16

Hack The Box

Hack The Box - Mongod

💡“In this machine, we will explore the mongodb environment as well as the way of connecting to it and accessing information that lives inside it. It is a very easy machine, but remember you have to master the absolute basics first and build a solid foundation, before going further."

Hack The Box

Hack The Box - Preignition

💡Task 1 Directory Brute-forcing is a technique used to check a lot of paths on a web server to find hidden pages. Which is another name for this? (i) Local File Inclusion, (ii) dir busting, (iii) hash cracking. dir busting 💡Task 2 What switch do we use for nmap’s

Hack The Box

Hack The Box - Explosion

💡Task 1 What does the 3-letter acronym RDP stand for? Remote Desktop Protocol 💡Task 2 What is a 3-letter acronym that refers to interaction with the host through a command line interface? cli 💡Task 3 What about graphical user interface interactions? gui 💡Task 4 What is the name of an

Hack The Box

Hack The Box - Redeemer

Howdy my fellow Cyber Enthusiasts! Welcome to another Starting Point Hack The Box offers. I am excited to embark on this journey with you. So, without further ado, let’s dive in! 😄 Need to embark on an exciting journey on Hack The Box? Sign up now using the following link.

Hack The Box

Hack The Box - Dancing

Howdy my fellow Cyber Enthusiasts! Welcome to another Starting Point Hack The Box offers. I am excited to embark on this journey with you. So, without further ado, let’s dive in! :) Need to embark on an exciting journey on Hack The Box? Sign up now using the following link.

Hack The Box

Hack The Box - Fawn

Howdy my fellow Cyber Enthusiasts! Welcome to the second Starting Point Hack The Box offers. I am excited to embark on this journey with you. So, without further ado, let’s dive in! :) Need to embark on an exciting journey on Hack The Box? Sign up now using the following

Hack The Box

Hack The Box - Meow

Howdy my fellow Cyber Enthusiasts! Welcome to the first Starting Point Hack The Box offers. I am excited to embark on this journey with you. So, without further ado, let’s dive in! :) Need to embark on an exciting journey on Hack The Box? Sign up now using the following

picoCTF

PicoCTF - Permissions

First, click on the button ‘Launch Instance’. Then ssh to the remote machine using the presented command. Yours might be with different port or user credentials. ssh -p 50477 [email protected] Then navigate to the following folder using CLI. cd /challenge/ cat metadata.json That’s all!

picoCTF

PicoCTF - Moneyware

We need to find the malware name for a Bitcoin address. Bitcoin address is the following. 1Mz7153HMuxXTuR2R1t78mGSdzaAtNbBWX Just search for 1Mz7153HMuxXTuR2R1t78mGSdzaAtNbBWX malware and you will be able to find the flag. Here is a hint… picoCTF{P…a}

picoCTF

PicoCTF - Chrono

First, open up the terminal and connect to the server using SSH. ssh [email protected] -p 53143 You will have different port and password, so just enter those provided. When you are connected to the server navigate to the following path. cd /challenge cat metadata.json You will

picoCTF

PicoCTF - Big Zip

First, use wget to download the big-zip-files.zip file. Then unzip it. wget https://artifacts.picoctf.net/c/503/big-zip-files.zip unzip -u big-zip-files.zip There are a lot of files. We can not search all of them manually for a flag. So we can use the following command instead

picoCTF

PicoCTF - First Find

First use wget to download the files.zip wget https://artifacts.picoctf.net/c/500/files.zip Extract the file using zip. unzip -u files.zip After that you will get a list of all the available folders and files that look like this. Archive: files.zip creating: files/ creating:

picoCTF

PicoCTF - Serpentine

Use wget to download the Python file. 💡A short description from Wikipedia: GNU Wget (or just Wget, formerly Geturl, also written as its package name, wget) is a computer program that retrieves content from web servers. It is part of the GNU Project. Its name derives from “World Wide Web”

picoCTF

PicoCTF - runme.py

This challenge is extremely easy. You use wget to download the file and then run the script using Python. If you want to learn more about wget, then in the terminal type the following. man wget wget https://artifacts.picoctf.net/c/34/runme.py 💡A short description from Wikipedia:

picoCTF

PicoCTF - PW Crack 5

First, download all the files provided. They are the following. All of them are needed to live in the same directory in order for this to work. level5.py level5.flag.txt.enc level5.hash.bin dictionary.txt Now let’s open up the main file which is the level5.

picoCTF

PicoCTF - PW Crack 4

First, download all the files provided. They are the following. All of them are needed to live in the same directory in order for this to work. level4.py level4.flag.txt.enc level4.hash.bin Now let’s open up the main file which is the level4.py import

picoCTF

PicoCTF - PW Crack 3

First, download all the files provided. They are the following. All of them are needed to live in the same directory in order for this to work. level3.py level3.flag.txt.enc level3.hash.bin Now let’s open up the main file which is the level3.py import

picoCTF

PicoCTF - PW Crack 2

First, download both the files and store them in the same directory.level2.py and level2.flag.txt.enc Then use the following command in the terminal to see the contents of the file. nano level2.py We can see that inside the function level_2_pw_check there is

picoCTF

PicoCTF - PW Crack 1

First, dowload both the files in store them in the same directory. (level1.py and level1.flag.txt.enc). Open up the level1.py using your favorite editor or with the following command from the terminal. nano level1.py ### THIS FUNCTION WILL NOT HELP YOU FIND THE FLAG --LT ######################## def

picoCTF

PicoCTF - HashingJobApp

First, open up the terminal and using the following command initiate a connection with the server. nc saturn.picoctf.net 57689 You have to md5 hash the presented text between quotes. To do that, you can apply this command. echo -n "cholesterol" | md5sum md5sum is used to verify

picoCTF

PicoCTF - Glitch Cat

Open up the terminal and type the following command. nc saturn.picoctf.net 51109 You will get an output. Copy that output and open up a terminal and type the following command. python3 print('picoCTF{gl17ch_m3_n07_' + chr(0x62) + chr(0x64) + chr(0x61) + chr(0x36) + chr(0x38)

picoCTF

PicoCTF - fixme2.py

Download the fixme2.py file, open it in an editor and change it to the following. import random def str_xor(secret, key): #extend key to secret length new_key = key i = 0 while len(new_key) < len(secret): new_key = new_key + key[i] i = (i + 1) % len(

picoCTF

PicoCTF - fixme1.py

Download the fixme1.py file, open it in an editor and change it to the following. import random def str_xor(secret, key): #extend key to secret length new_key = key i = 0 while len(new_key) < len(secret): new_key = new_key + key[i] i = (i + 1) % len(