Brute Force task in an 15 min lab taking over 30 hours to complete
Hello everyone, I am doing an Immersive Labs about hacking, and there is a lab where I can learn how to crack codes with Hydra using SSH, HTTP, and FTP. The problem is that for the FTP part, I am supposed to brute-force a password (a 4-character password composed of lowercase letters and numbers). I am using the correct command, but the brute force is extremely slow, doing roughly 1 attempt every 3.5 seconds, which brings the total cracking time to over 30 hours. I waited 2 hours already, which is far too long, especially since the lab has to be extended every 10–15 minutes. However, now it has become personal, and I really want to get this password. Can anyone help? I am using the following command: hydra -l jimmy -x 4:4:1a -f -t 64 ftp://(ip address) i have tried -t, 4, 8 and 16, doesn't change anything I also tried creating 4 lists containing all possible passwords and running them in parallel with -P instead of using -x, but I always got too many attempts. Name of the lab ist: Credential Access: Using Hydra
404 Oops. You look lost.
I am trying to complete a training: 2026 Application Developer IS Curriculum for Non-Employees-ASP.NET At step 4: 2026 Application Developer IS Curriculum for Non-Employees-ASP.NET directs me to the Immersive Lab page, but I get this message: I tried to contact the support team, but it sends me to this page and when I click to log in, it comes back here, it's a loop: If I try to access the page where I should have the task assignments, it is empty. What could I do in this case? I am waiting for an answer.
Incident Response: Application Shimming
I'm working through the Incident Response: Application Shimming lab and I'm stuck on the final question (but have correctly answered all previous questions). Without giving away any answers to those reading this, I'm hoping someone can tell me whether I'm following the correct investigation path or if I'm overlooking an artifact. So far I've: - Followed the registry keys mentioned in the briefing. - Identified the affected application and the installed shim database. - Examined the SDB file with the provided analysis tool. - Followed the breadcrumb trail from the previous questions. - Examined the DLL identified in the previous question for URLs, HTTP-related strings, and other obvious indicators. - Searched the SDB and related files for URLs and network indicators. - Checked the application's installation directory for additional relevant artifacts. At this point I can't find anything that appears to answer the final question, and I'm wondering if I'm expected to analyze a different file or use a different tool than the ones provided in the VM. Could someone give me a nudge in the right direction? Specifically, I'd like to know: Am I investigating the correct artifact? Is there another file or artifact that should be analyzed? Or is there another technique/tool that the lab expects me to use? Thanks!
DFIR CTF: LightNeuron DLL - Question 5
In relation towards the question: What is the xor key for the decrypted strings? I have basically entered, and set the breakpoint into the neutron light dll While searching for the strings references I came across I am super lost in where I should continue and where I should be pivoting towards. Is there anything that I should be digging deeper into? As I mostly have been digging deeper into the 02x value.
CVE-2022-33891 (Apache Spark) – Defensive Question 8
I am wondering about what I am missing in terms of: Analyze the log files. At what time does the attacker first discover that the Apache Spark engine is accessible? (Provide your answer in the format HH:MM:SS) I cant seem to get the time right. unless if I am looking at the wrong area.
