Recent DiscussionsMost RecentNo Solutions YetSolutionsNo Replies YetWhat is the string of 16 bytes that make up the partition information? Hi, i am stuck by this question from Digital Forensic-File System chapter. Does anyone knows the answer? Alin SolvedAbusing Trust Boundaries for RCE I'm a bit stuck on this one as I'm not that familiar with Git and all the associated terminology. How do I clone the repo? which dir does the .mcp.json file sit in? Does this not pre-exist as its...SolvedOT Threat Actors - CyberAv3ngers Hi, I’m stuck at Q6 “During the defacement campaign of Unitronics, the threat actor exploited internet-facing PLCs and HMIs. What MITRE ATTEMPT&CK tactic does this fall under?” it seems obvious to m...SolvedOWASP 2017 Java: Sensitive Data Exposure 3. What are the HTTP parameters necessary to upload a file? Enter them separated by a comma (parameter_1,parameter2) can anyone help me on this question? Thanks. SolvedDFIR CTF: LightNeuron DLL - Question 5 In relation towards the question: What is the xor key for the decrypted strings? I have basically entered, and set the breakpoint into the neutron light dll While searching for the strings ref...SolvedDFIR CTF: PCAP Challenge - Question 8 When using the XOR key to decrypt the MZ .exe file for some reason the md5sum provided is wrong I am wondering about how I am approaching this wrong and if there is a way I should piv...SolvedAI Red Teaming: Lateral Movement and Privilege Escalation – Demonstrate Your Skills Hello, I completed all the questions but I'm stuck with N.6: "What is the token in the service account's home directory on the database host?" I got the ssh key. I got the user. I got the host....SolvedDFIR CTF: PCAP Challenge - Question 7 For the question What is the XOR key used to encrypt the malware payload? I am wondering about what I should be looking for in the WireShark, as I can't seem to find any indications of a specific ...SolvedDFIR CTF: Malware Memory - Question 9 For What is the name of the JSON file that exists inside the NetDefender directory? when running the command: vol.py -f malwarememory.vmem --profile=Win7SP1x86_23418 filescan | grep -i "NetDefend...SolvedEncoding: Demonstrate your Skills Question 5 requires finding a non-ASCII character. When I enter the url into punycode the code comes back in all ascii format. xn--catmoviesrs-esm.com SolvedPowerShell Deobfuscation – Challenge 8 I am wondering about where I should dig deeper for the Cyber Chef decoding process where the deobfuscation process is However, when trying to reverse it such as through it becomes super j...SolvedPowershell Deobsfuscation Ep.7 I first collected the .ps1 script and noticed that it is from hex after decoding from hex I noticed that it converts from decimals This led me to use the from the from decimal r...SolvedHealthcare Compliance I keep getting an in correct response when answering a question on the Healthcare Compliance Lab. The HIPAA Framework. Question is Your hospital hires an IT consultant to audit your network securi...SolvedAPT29 Threat Hunting with Splunk: Demonstrate Your Skills - Question 10 In relation towards the question : A PowerShell script was initially executed to extract encoded data from an image file. What is the full ParentCommandLine field value used to execute this? I am p...SolvedThreat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7 In relation to What is the device that tcpdump is dumping packets from? For some reason win-host-1.asgard.corp and win-host-1 does not work and NPF_{B1ADE8FD-CC9A-4857-9C50-28078779F038}...SolvedThreat Actors: Mint Sandstorm – Campaign Analysis - Question 9 In relation to the What named local variable holds the IP address from the for loop? I have been checking out the local varaibles but as per the for loop none of the variables typed in w...SolvedThreat Actors: APT43 - Question 7 In relation to What Resource Development technique was used to facilitate the hosting of beacons, implants, and file exfiltrators? For some reason Obtain Capabilities is wrong, and I trie...SolvedAPT34: PoisonFrog - Question 6 For the What is the name of the file that executes the HTTP and DNS handling scripts?, I am confused on where I should be digging deeper as the powershell script was showcased to be wrong in terms ...SolvedAPT34: Glimpse - Question 4 For What is the name of the Visual Basics script that is used to run the malicious PowerShell script?, I am wondering about where should I dig deeper into volatility into extracting the command his...SolvedHafnium: ProxyLogon (Offensive) - Question 3 For the FQDN, I am wondering about where I am going wrong as I am basically using the command expected of this lab. However, there wasn't any shell code provided nor any expecations of wha...Solved
Tagshelp & support268immersive labs175defensive cyber91challenges71offensive cyber68questions & feedback57application security53cloud security50immersive labs application security23other21
