Trick or Treat on Specter Street: Ghost of the SOC
I know it's one of the challenge labs but I'm fairly sure I'm missing something extremely straight forward, it's 100 point difficulty 4.... Someone help me please! I'm banging my head against a wall with this one! If anyone can point me in the right direction of the specific persistence mechanism I think that would be a start Q8. Use the service account to delete the spirit's persistence mechanism. The methods you employ to gain access to this account are up to you.
Burp Suite Basics: Intruder - Stuck on missing password.txt
Hello community, I'm stuck in lab https://mercedes-benz.immersivelabs.online/v2/labs/burp-basics-intruder/series/burp-suite. The attack to carry out is about a brute-force guess on mfogg1's password using the intruder. The briefing states: Brute force the login page using the password.txt list against the user mfogg1. I'm missing that password.txt file, where the heck is it? I carried out an intruder attack (Cluster bomb) using well known passwords from /usr/share/wordlists/metasploit/burnet_top_1024.txt without success. Even worse, testing those 200 attacks (there are only 200 passwords in that file), tooks quite a considerable time. I must have missed something about the location of that obscure password.txt file. I'm stuck. Perhaps someone can shed a light on this. Thanks in advance, Wolfgang
New Maze Challenge is now LIVE!
Do you have what it takes to escape The Maze? Put your offensive security skills to the ultimate test in eight of the most challenging OffSec labs ever assembled by the Immersive team. Whether you’re an experienced Red Teamer, or fancy yourself an offensive security superstar, this one’s for you! Check out the new Community Challenges Area today to find out more about The Maze and how to take part: Maze
Malicious Document Analysis: Visual Basic for Applications (VBA) Question 6
"Analyzing sample2.xls, what is the name of the function used to decode and save the Base64 encoded values?" I have zero idea on how to get this answer. There is a function Base64Decode() and a function SaveDocument(). I don't know if I am supposed to run a olevba command, look at the screenshots in the briefing, or run some question code. Thank you
🏁 Episode 7 of Season 1 of The Human Connection Challenge is Closed! 🏁
Hey everyone, We hope you enjoyed Lab 7 of The Human Connection Challenge: Season 1 our most difficult challenge yet! It's been fantastic to see the community collaborating and sharing your experiences, thanks to everyone who shared their hints, tips and support. 19 of you successfully completed this lab and over 300 of you have been entered into the prize draw to win some fantastic prizes: 🥇 Tickets, Flights & Accommodation to an Immersive Summit in NYC or London 🥈 2 x PlayStation®5 Consoles 🥉 10 x Apple AirPods or JBL Headphones 👕 Much coveted Immersive swag and goodies! We will be drawing names out of the hat later today and will contact the winners directly. As per usual, the lab walkthrough will be shared shortly and we have a special webinar about the lab on Thursday. Join us to hear directly from lab author and evil genius StefanApostol. In the meantime, please drop a comment below and let us know how you got on with this challenge, and what you would like to see from Season 2...
