feedback
22 TopicsNode.js - Beginner -- What am I missing?
In the Node.js - Beginner collection there is a practical lab on Forced Browsing. I have completed what is setup as the criteria for the lab but it keeps telling me that the code isn't secure. I have tested with two different users and the solution works to prevent forced browsing. Is there some other criteria that needs to be met that I'm missing. Remediation: Authorization check: returns a 401 if the user isn't logged in I have also added the author check to verify that only the logged in user retrieves their own drafts.Solved247Views1like5CommentsImmersive GUI
Previously, I was able to view multiple questions at once within a lab, which allowed me to plan my approach and see how the questions interlinked. Now i can only see one question at a time and this has made it harder to manage my time and workflow effienciently and sometimes creativity. Is there a way or feature to return to the previous format?199Views1like8CommentsWinDbg: Ep.3 – Debugging Malware
The briefing says: [...] bp kernel32!LoadLibraryA ".printf \"Loading Library: %ma\",poi(esp+0x4);.echo};g"bp kernel32!GetProcAddress ".printf \"\t Looking up function: %ma\",poi(esp+0x8);.echo;g"bp advapi32!CreateServiceW ".printf \"Creating Service: \";.echo;.printf \"\tService Name: %mu\",poi(esp+0x4);.echo;.printf \"\tDisplay Name: %mu\",poi(esp+0x8);.echo;g" [...] Yet, none of these work. The OS was updated, the instructions not. Fix: bp KernelBase!LoadLibraryA bp KernelBase!GetProcAddress bp sechost!CreateServiceWSolved191Views1like1CommentQuestion for members: your most rebellious labs
Hello!, I think it would be interesting to share in this Community those labs that have been the most difficult for us to complete; or those that are resisting us and we have invested a significant amount of time: trying tactics and techniques, reading carefully their documentation and references, blog posts about the exploits, testing options or just going step by step. Let's get started :)!: .: I find it hard to finish labs related to access policies or permissions in Cloud: maybe it's the syntax required to give permission to a S3 bucket or to the access point ... but I invest a lot of time to complete them. I am close to having finished 2,400 labs but when I have to write the concrete policy in that json file I struggle :). .: Esoteric labs, as I like to call them ^^. Example: CAN bus. Don't ask me the specific reason, but I have been trying for some time to finish the last few!: I love them, but I'm stuck at the moment. [...] So: which are the labs you have had the hardest time finishing (no matter the difficulty) and which are the ones you are investing the most time in?. Thank you and good luck!.180Views1like2CommentsCredential Access - NTDS
Got down to the last two questions and I felt like I've tried all suggestions in the briefing. Can anyone help out with the last two question? Also, the "secretsdump.py -ntds <ntds.dit path> -system <SYSTEM hive path> LOCAL" isn't working but tried "impacket.examples.secretsdump" and it doesn't throw an error, but also doesn't throw any output.178Views1like3CommentsOpen Source Intelligence (OSINT): Boarding Pass
Has anyone else had issues with this entire OSINT lab? In the Social Media lab, I had to create a throwaway X account just to be able to find the content on the Dade Murphy profile. Perhaps this lab should be updated to reflect the way X operates now, with limits on what can and can't be viewed without logging into an account. I'm now on the Boarding Pass lab, where I have to continue the OSINT research into Dade's Facebook profile. I'm having significant issues with The Wayback Machine, as it only allows me to access 1 of the 16 captures showing. However, I can't view anything on this 1 accessible profile as I am not logged in, yet I cannot log in through The Wayback Machine. The lab requires me to find and view an image of a boarding pass he has apparently uploaded, to do some OSINT research on the data within it, but I can't view any images at all! It seems like this lab isn't possible at the moment for me. Does anyone have any tips on this? ThanksSolved174Views0likes4Commentstweaks to career paths
Hi - I'm reasonably close to finishing career path: Advanced Threat Hunting and Digital Forensics However I really don't like the look of "DFIR CTF: LightNeuron DLL" Is it possible to get the career path amended so that this lab does not have to be completed. many thanks - gusSolved150Views1like2Comments