AI Foundations: Retrieval Augmented Generation (RAG) Lab
Within step 6, the instruction says after creating the Knowledge base "My Intellectual Property" folder, xto change the chuck size to 65 however a Warn is displayed saying, "Please add both embedding model and LLM in the setting>Model provider fist. then set them in the "set default models'. After selecting the Ok button, I try to add vai the Set default model but then see this... "The default embedding model for each newly created knowledge base. If you cannot find an embedding model from the dropdown, check if you are using RAGFlow slim edition (which does not include embedding models) or check https://ragflow.io/docs/dev/supported_models to see if your model provider supports this model." Not sure how to address/resolve, any assistance will be helpful. Thank you, Tony
FIN7 Threat Hunting with Splunk: Execution Analysis
Hello everyone, I am stuck at the following task : "Which IP address and port does the encrypted payload communicate with? (Format ip:port)" I think I found the right function (babymetal) as I could answer the previous question : "What key is used to decode the embedded shellcode?" But where do I go from there ? I thought about doing dynamic analysis, but I have no tools to do so. Quite frankly I am lost Thanks for your help
Struggling to find the IT email on Simulations: BarterTown Delivery
During the last few days, I’ve been stuck on this lab, and I’m not sure what I’m missing. The lab asks us to use OSINT tools and techniques to gather intelligence about individuals to target within the organization, with the goal of testing the awareness of BarterTown’s IT staff and eventually gaining a foothold in the internal network. I’ve been using the information provided by the lab as a starting point for my reconnaissance. The website gives us several employees and their email addresses, but none of them are identified as IT staff. I also found the DNS SOA contact (hostmaster.bartertown.bitnet), but that appears to be a standard administrative DNS alias rather than an actual employee. The mail server does not seem to allow useful anonymous user enumeration, and the other reconnaissance results have not revealed the missing user. Has anyone completed this lab and can give me a hint about where/how the missing target information is supposed to be discovered?
Threat Research: Dependency Confusion exercise 8
Humble Pie is not updating after 60 seconds it is stuck in the version 1.0.0 my packages have been created my setup.py seems to be working fine But I am never getting an answer in listening, never getting the connection and build.log is NEVER updating to latest version why is this not working... I really need to have this lab finished for my work.Exercise "Web Server Brute Force Authentication: Anti-CSRF Tokens" broken?
Is this training really working? Every interaction with the page "Immersive Airport Display Management Systems" displays "csrf token is invalid". From the briefing it sounds all doable, do a get, get the token, send it in the post in a loop with the passwords. But it doesn't work for me at all.
Help Request – Infrastructure Hacking: Demonstrate Your Skills – Attacking UnrealIRC
Hi Everyone, I’m currently working on the Infrastructure Hacking: Demonstrate Your Skills – Attacking UnrealIRC lab and have been stuck on Target 2. The target is running an SMTP server that is vulnerable to remote code execution. After identifying the software and version, I attempted to develop and execute an exploit to retrieve the token located in /root/token.txt. I also noted the hint that ncat is installed on the target. I have tried multiple approaches, including the exploit script shared below, but I have not been successful in obtaining a shell or retrieving the token. Despite several troubleshooting attempts, I’m unable to progress further. Has anyone completed this lab successfully? If so, I would greatly appreciate any guidance, hints, or suggestions that could help me understand what I might be missing. The target server has ncat installed. can someone complete this lab, can please help me Thank you in advance for your help and support! Regards, Prashanth N.
AI Red Teaming: Lateral Movement and Privilege Escalation – Demonstrate Your Skills
Yes, this is a Demonstrate Your Skills Lab. I extracted the SSH key, but I am not able to find the IP address of the Postgres server. OrchidDB AI Chatbot did not tell me, even in maintenance mode, I ran a lot of Nmap -p 22, but no server is accepting the key. e.g., 10.102.105.91 Permission denied (publickey,password,keyboard-interactive)
