Node.js - Beginner -- What am I missing?
In the Node.js - Beginner collection there is a practical lab on Forced Browsing. I have completed what is setup as the criteria for the lab but it keeps telling me that the code isn't secure. I have tested with two different users and the solution works to prevent forced browsing. Is there some other criteria that needs to be met that I'm missing. Remediation: Authorization check: returns a 401 if the user isn't logged in I have also added the author check to verify that only the logged in user retrieves their own drafts.Solved170Views1like5CommentsWinDbg: Ep.3 – Debugging Malware
The briefing says: [...] bp kernel32!LoadLibraryA ".printf \"Loading Library: %ma\",poi(esp+0x4);.echo};g"bp kernel32!GetProcAddress ".printf \"\t Looking up function: %ma\",poi(esp+0x8);.echo;g"bp advapi32!CreateServiceW ".printf \"Creating Service: \";.echo;.printf \"\tService Name: %mu\",poi(esp+0x4);.echo;.printf \"\tDisplay Name: %mu\",poi(esp+0x8);.echo;g" [...] Yet, none of these work. The OS was updated, the instructions not. Fix: bp KernelBase!LoadLibraryA bp KernelBase!GetProcAddress bp sechost!CreateServiceWSolved122Views1like1CommentQuestion for members: your most rebellious labs
Hello!, I think it would be interesting to share in this Community those labs that have been the most difficult for us to complete; or those that are resisting us and we have invested a significant amount of time: trying tactics and techniques, reading carefully their documentation and references, blog posts about the exploits, testing options or just going step by step. Let's get started :)!: .: I find it hard to finish labs related to access policies or permissions in Cloud: maybe it's the syntax required to give permission to a S3 bucket or to the access point ... but I invest a lot of time to complete them. I am close to having finished 2,400 labs but when I have to write the concrete policy in that json file I struggle :). .: Esoteric labs, as I like to call them ^^. Example: CAN bus. Don't ask me the specific reason, but I have been trying for some time to finish the last few!: I love them, but I'm stuck at the moment. [...] So: which are the labs you have had the hardest time finishing (no matter the difficulty) and which are the ones you are investing the most time in?. Thank you and good luck!.94Views1like2Commentstweaks to career paths
Hi - I'm reasonably close to finishing career path: Advanced Threat Hunting and Digital Forensics However I really don't like the look of "DFIR CTF: LightNeuron DLL" Is it possible to get the career path amended so that this lab does not have to be completed. many thanks - gusSolved89Views1like2CommentsOpen Source Intelligence (OSINT): Boarding Pass
Has anyone else had issues with this entire OSINT lab? In the Social Media lab, I had to create a throwaway X account just to be able to find the content on the Dade Murphy profile. Perhaps this lab should be updated to reflect the way X operates now, with limits on what can and can't be viewed without logging into an account. I'm now on the Boarding Pass lab, where I have to continue the OSINT research into Dade's Facebook profile. I'm having significant issues with The Wayback Machine, as it only allows me to access 1 of the 16 captures showing. However, I can't view anything on this 1 accessible profile as I am not logged in, yet I cannot log in through The Wayback Machine. The lab requires me to find and view an image of a boarding pass he has apparently uploaded, to do some OSINT research on the data within it, but I can't view any images at all! It seems like this lab isn't possible at the moment for me. Does anyone have any tips on this? ThanksSolved73Views0likes4CommentsT!m3Trav3l!ngC@t, nice PW but i have German Layout...
In "Active Directory Basics: Ep.4 – Adding a Machine" in the VM i cant enter the "@" Startet Notepad and typed all keys, changes layout to german. Only "€" works, sometimes "|" does not Most i use cut&paste but this time i cannot c&p also...Solved64Views0likes2CommentsThank you, Immersive Labs
For your kindness and genius. And for allowing us to be a little bit wiser every day; thank you for your practical and theoretical labs (I have even smiled with some of them :)). Thank you for making us investigate, for going a little further; and for having an impact on our customers: protecting them better. Thank you for allowing us to work with recent CVEs from various perspectives (attack, defense and post-mortem). Thank you for your effort and for making it possible. Here's to many more years! :).62Views5likes1Comment