challenges
60 Topics
Modern Encryption: Demonstrate Your Skills
Hi there, I have completed all questions except for Q.10 which involves the decryption of an RSA-encrypted file. To the best of my knowledge, a private key is required to decrypt this asymmetrically encrypted file, but I only see a public "public.pem" key in the "~/Desktop/Lab-Files" directory. Am I missing something? I have completed all the other questions so I believe all necessary files/tokens should have already been generated. Any help would be much appreciated. Many thanks, PeteSolved445Views3likes5Comments
Haunted Hollow 2023: Haywire Host
Hi! I'm going through Haunted Hollow 2023: Haywire Host and I could use a little hint :) Once I SSH to ShyBot, I can indeed see there shell is pretty limited. The instructions say to execute the following command /opt/interact-host. However, it produces no output, just immediately returns. I explored the filesystem a bit but could not find the Python interpreter mentioned in /opt/venv. Giving the value of an env variable (from the last line of .profile) to the /opt/interact-host (as an argument) also does not produce any output. There's probably something I overlooked - could anybody suggest some next step forward? Thanks in advance!Solved203Views2likes7Comments
SuperSonic: Ep.7 – LIFTON
Hi there, Has anyone completed SuperSonic: Ep.7 – LIFTON recently? I have answered all the questions up to question 10. I believe I need to obtain files from the ftp server, however, when trying to login with the credentials from questions 7 and 8 I get failed authentication. I wanted to confirm if this is a me issue, or there is an issue with the FTP server itself? Any help would be greatly appreciated :)Solved257Views2likes6Comments
FIN7 Threat Hunting with Splunk: Ep.2 – Initial Access
Question 8: Extract the hex-encoded image from the RTF that starts on line 108. Decode and open the resulting image file. What is the first line of text that appears in the image? I facing difficulties answering this question, Please let me know how can I answer this?102Views1like2Comments
Advanced CTF Challenge: Hardened Maze
Hi Team, I found file upload options on one port but get information: "For authorized personnel: Upload a critical security patch." I tried with many extension with curl and POST method with -F "exe_file=@filename" Unfortunately, it does not accept any of my combinations. You can give us some clue as to how to approach this 🙂Solved395Views1like9CommentsAdvanced CTF Challenge: Improbable Maze
I have the token from the POST but when I put in under Repeater and change the key value to 4, 4, like what was shown in the live training session, I only receive back the response: Too Slow. Not sure what I am missing to get the token value.Solved345Views1like4Comments
