offensive cyber

30 Topics

Return to Haunted Hollow: Haunted Helpdesk
Hello everyone, I'm stuck in Q2 of Return to Haunted Hollow (escalate to root). Does anyone have any hint about what binary or service can be exploited to elevate privileges? Kind regards,
Solved
T3S0r0
6 months ago Place Help & Support Forum
231Views
2likes
6Comments
OWASP 2017 Java: Underprotected APIs
I am stuck on the "OWASP 2017 Java: Underprotected APIs" challenge. I have tried accessing "<Target URL>/FileDownloadServlet?path=/etc/&file=flag.txt," for which I received the error message "HACKING DETECTED! Your activity has been logged, and authorities have been informed." I created a user with admin privileges and used its session to access the above-mentioned URL, but that also didn't work.
Solved
Akshay
6 months ago Place Help & Support Forum
125Views
2likes
1Comment
What labs should I do?
I'm looking for some Offensive Cyber challenges - what should I do? ✨
Solved
NyePrior
10 months ago Place Help & Support Forum
87Views
2likes
1Comment
Anyone finished the "Etherium Smart Contracts"?
Need help on three labs on the Ethereum smart contracts. I managed to do some but stuck on 3 of them so far: Ethereum: Contract Challenge 2 – Sisyphean Brute force the hash? Ethereum: Contract Challenge 4 – Random Can't get my code to work for prediciting the numbers... Ethereum: Contract Challenge 5 – Robin Hood Absolutely no idea.... Any help would be appreciated :)
IotS2024
29 days ago Place Help & Support Forum
129Views
2likes
11Comments
Can´t download linpeas with wget
Privilege Escalation: Linux – Automated Enumeration Hi. I can´t download the linpeas with wget http://[Kali Desktop IP Address]:8000/LinPEAS/linpeas.sh due to "connection refused" or "connected but ERROR 404: File not found" Regards.
Solved
posewadone
5 months ago Place Help & Support Forum
621Views
2likes
8Comments
dotCMS Remote Code Execution (CVE-2022-26352)
Hi all, I completed all steps and got RCE, I thought I found the password but lab says its not valid. Please check the screenshots. Is it a lab error or..? Thanks in advance
Solved
AtakanBal
5 months ago Place Help & Support Forum
117Views
1like
3Comments
Reverse Engineering (Offensive) JavaScript Analysis: JSDetox
I'm stuck at below two questions Q6: Which variable does the initial script try to return? Q8: The exploit kit contains a large block of hex encoded shellcode stored in a variable. This shellcode is also XOR encoded. What is the single byte xor key? (In the format 0xNN e.g. 0x11.) So far I downloaded the HTTP objects via Wireshark, extracted the script to JSDetox then decoded base64 strings which resolves to other 2 scripts. With these steps I was able to answer other questions but I can't go any further, any guidance? Thanks in advance
Solved
AtakanBal
6 months ago Place Help & Support Forum
270Views
1like
10Comments
IoT & Embedded Devices: Certificate Underpinning
I'm stuck at the step 5 "Create a Python script to exploit the alarm system". I tried to set up a TCP listener on localhost for port 443 but I didn't have any activity from any user. Any tips on how to proceed?
Solved
AtakanBal
6 months ago Place Help & Support Forum
513Views
1like
7Comments
Server-Side Request Forgery
I need help with step 5 and 6 of Server-Side Request Forgery lab. I was able to find the location of potential SSRF i.e "lookup?url=http://localhost:3000/online" after that I have tried directory traversal and other methods in place of HTTP (FTP). Nothing seems to working to get the bot name/service account
Solved
Akshay
6 months ago Place Help & Support Forum
236Views
1like
4Comments
Why are Team Simulations separate from Labs. What is the difference between the two?
I don’t understand why Team Simulations are separate from Labs. What is the difference between the two?
Solved
TillyCorless
10 months ago Place Help & Support Forum
76Views
1like
1Comment