Help Request – Infrastructure Hacking: Demonstrate Your Skills – Attacking UnrealIRC
Hi Everyone, I’m currently working on the Infrastructure Hacking: Demonstrate Your Skills – Attacking UnrealIRC lab and have been stuck on Target 2. The target is running an SMTP server that is vulnerable to remote code execution. After identifying the software and version, I attempted to develop and execute an exploit to retrieve the token located in /root/token.txt. I also noted the hint that ncat is installed on the target. I have tried multiple approaches, including the exploit script shared below, but I have not been successful in obtaining a shell or retrieving the token. Despite several troubleshooting attempts, I’m unable to progress further. Has anyone completed this lab successfully? If so, I would greatly appreciate any guidance, hints, or suggestions that could help me understand what I might be missing. The target server has ncat installed. can someone complete this lab, can please help me Thank you in advance for your help and support! Regards, Prashanth N.
AI Red Teaming: Lateral Movement and Privilege Escalation – Demonstrate Your Skills
Yes, this is a Demonstrate Your Skills Lab. I extracted the SSH key, but I am not able to find the IP address of the Postgres server. OrchidDB AI Chatbot did not tell me, even in maintenance mode, I ran a lot of Nmap -p 22, but no server is accepting the key. e.g., 10.102.105.91 Permission denied (publickey,password,keyboard-interactive)
Ransomware: TeslaCrypt - Stuck at Last Question
Has anyone figured out the final question of the Ransomware: TeslaCrypt lab? "What is the domain of the first DNS request made after executing the malware?" No correct answers via Ghidra No answers via ProcMon (suggested in the briefing) I checked the activity in x32dbg - nothing Any ideas? Is the lab broken? As always I might be looking too far...
Create Teams for Students and assign tasks to be completed
Dear community, being a professor at a university, I'm trying to create a group where i can invite students in order to complete the tasks of a laboratory that are important to the subject we are learning. I have had the experience on the past but as I see a lot has changed and I cant find how to do that now. Can someone guide me through process please?
Trick or Treat on Specter Street: Widow's Web
I am very stucked in Trick or Treat on Specter Street: Widow's Web I can't do none of the questions, but in any case I start by 4th that is the first answerable one Your first task is to simulate the loyal Crawlers. Run legitimate-crawler and inspect the output in Lab-Files to observe their behavior. To simulate the rogue Crawlers, you must discover the hidden paths on the website. Read the blog posts – they contain clues. Disallow these in Website-Files/robots.txt and run malicious-crawler. Inspect the output in Lab-Files. What is the token? I have created the robots.txt file since I understand that malicious-crawler goes expressedly there. My robots.txt contains all url's I can imagin Disallow: /secret Disallow: /treat Disallow: /hidden Disallow: /crypt Disallow: /warden Disallow: /rituals Disallow: /witch-secrets Disallow: /admin Disallow: /vault Disallow: /uncover Disallow: /post1 Disallow: /post2 Disallow: /post3 Disallow: /post4 Disallow: /contact Disallow: /drafts/rituals But the result of malicious-crawler.txt doesn't give me either a token nor a hint I have curl-ed all pages looking for words as token and nothing. I have found some key words in http://127.0.0.1:3000/witch-secrets as intercepted-incantations, decoded them and nothing. I have searched in spider-sigthings.log what hapened at 3.00 am but nothing Can someone gime me a hint?Trick or Treat on Specter Street: Ghost of the SOC
I know it's one of the challenge labs but I'm fairly sure I'm missing something extremely straight forward, it's 100 point difficulty 4.... Someone help me please! I'm banging my head against a wall with this one! If anyone can point me in the right direction of the specific persistence mechanism I think that would be a start Q8. Use the service account to delete the spirit's persistence mechanism. The methods you employ to gain access to this account are up to you.
