はまやんはまやんはまやん

hamayanhamayan's blog

2024-07-01から1ヶ月間の記事一覧

Hack The Box Sherlocks - Tracer Writeup

https://app.hackthebox.com/sherlocks/Tracer Hack The Box Sherlocksとは Sherlock Scenario A junior SOC analyst on duty has reported multiple alerts indicating the presence of PsExec on a workstation. They verified the alerts and escalated t…

Hack The Box Sherlocks - ProcNet Writeup

https://app.hackthebox.com/sherlocks/ProcNet Hack The Box Sherlocksとは Sherlock Scenario With the rising utilization of open-source C2 frameworks by threat actors, our red team has simulated the functionalities of one such widely employed…

Hack The Box Sherlocks - Ore Writeup

https://app.hackthebox.com/sherlocks/Ore Hack The Box Sherlocksとは Sherlock Scenario One of our technical partners are currently managing our AWS infrastructure. We requested the deployment of some technology into the cloud. The solution …

Hack The Box Sherlocks - Nubilum-1 Writeup

https://app.hackthebox.com/sherlocks/Nubilum-1 Hack The Box Sherlocksとは Sherlock Scenario Our cloud administration team recently received a warning from Amazon that an EC2 instance deployed in our cloud environment is being utilised for …

Hack The Box Sherlocks - Noted Writeup

https://app.hackthebox.com/sherlocks/Noted Hack The Box Sherlocksとは Sherlock Scenario Simon, a developer working at Forela, notified the CERT team about a note that appeared on his desktop. The note claimed that his system had been compr…

Hack The Box Sherlocks - Lockpick2.0 Writeup

https://app.hackthebox.com/sherlocks/Lockpick2.0 Hack The Box Sherlocksとは Sherlock Scenario We've been hit by Ransomware again, but this time the threat actor seems to have upped their skillset. Once again a they've managed to encrypt a …

Hack The Box Sherlocks - Lockpick Writeup

https://app.hackthebox.com/sherlocks/Lockpick Hack The Box Sherlocksとは Sherlock Scenario Forela needs your help! A whole portion of our UNIX servers have been hit with what we think is ransomware. We are refusing to pay the attackers and…

Hack The Box Sherlocks - Litter Writeup

https://app.hackthebox.com/sherlocks/Litter Hack The Box Sherlocksとは Sherlock Scenario Khalid has just logged onto a host that he and his team use as a testing host for many different purposes, it’s off their corporate network but has ac…

Hack The Box Sherlocks - Hyperfiletable Writeup

https://app.hackthebox.com/sherlocks/Hyperfiletable Hack The Box Sherlocksとは Sherlock Scenario There has been a new joiner in Forela, they have downloaded their onboarding documentation, however someone has managed to phish the user with…

Hack The Box Sherlocks - Einladen Writeup

https://app.hackthebox.com/sherlocks/Einladen Hack The Box Sherlocksとは Sherlock Scenario Our staff recently received an invite to the German embassy to bid farewell to the Germany Ambassador. We believe this invite was a phishing email d…

Hack The Box Sherlocks - Constellation Writeup

https://app.hackthebox.com/sherlocks/Constellation Hack The Box Sherlocksとは Sherlock Scenario The SOC team has recently been alerted to the potential existence of an insider threat. The suspect employee's workstation has been secured and…

OSCTF Writeups

https://ctftime.org/event/2416 [Web] Introspection [Web] Style Query Listing...? [Web] Heads or Tails? [Web] Indoor WebApp [Web] Introspection ソースコード無し。フラグを入力するサイトが与えられる。Burp Suiteを起動してサイトを巡回すると/scr…

DownUnderCTF 2024 Writeups

https://ctftime.org/event/2284 [Web] parrot the emu [Web] zoo feedback form [Web] co2 [Web] co2v2 GET /でHTMLを埋め込む CSPのnonceを固定化する 攻撃をまとめる [Web] hah got em [Web] i am confusion [Forensics] Baby's First Forensics [Forensi…

UIUCTF 2024 Writeups

https://ctftime.org/event/2275 [Web] Fare Evasion [Web] Log Action [Web] Fare Evasion ソースコード無し。I'm a Passengerという押せるボタンとI'm a Conductorという押せないボタンが置いてある。アクセスすると以下のようなJWTが手に入る。 eyJhbGciO…