offensive cyber

30 Topics

Anyone finished the "Etherium Smart Contracts"?
Need help on three labs on the Ethereum smart contracts. I managed to do some but stuck on 3 of them so far: Ethereum: Contract Challenge 2 – Sisyphean Brute force the hash? Ethereum: Contract Challenge 4 – Random Can't get my code to work for prediciting the numbers... Ethereum: Contract Challenge 5 – Robin Hood Absolutely no idea.... Any help would be appreciated :)
IotS2024
26 days ago Place Help & Support Forum
112Views
2likes
10Comments
World Cup Special - Immersive Squad
need help with this lab , i have bypassed the cookie to login as croatia manger , even double encoded ../ to get path traversal payload. still i am getting empty roster as output, (see image attached). so please help here ?
sargentv
28 days ago Place Help & Support Forum
83Views
0likes
2Comments
Reverse Engineering (Offensive) JavaScript Analysis: JSDetox
I'm stuck at below two questions Q6: Which variable does the initial script try to return? Q8: The exploit kit contains a large block of hex encoded shellcode stored in a variable. This shellcode is also XOR encoded. What is the single byte xor key? (In the format 0xNN e.g. 0x11.) So far I downloaded the HTTP objects via Wireshark, extracted the script to JSDetox then decoded base64 strings which resolves to other 2 scripts. With these steps I was able to answer other questions but I can't go any further, any guidance? Thanks in advance
Solved
AtakanBal
2 months ago Place Help & Support Forum
270Views
1like
10Comments
IoT & Embedded Devices: Certificate Underpinning
I'm stuck at the step 5 "Create a Python script to exploit the alarm system". I tried to set up a TCP listener on localhost for port 443 but I didn't have any activity from any user. Any tips on how to proceed?
Solved
AtakanBal
3 months ago Place Help & Support Forum
502Views
1like
7Comments
PoshC2: Ep.6 – Demonstrate Your Skills
Hi everyone I am stuck on question 8: Run a privilege escalation enumeration module. What is the Administrator password? I already tried most of the privesc modules like invoke-allchecks, hashdump etc. Any hints? Thanks!
Solved
sidi7
3 months ago Place Help & Support Forum
102Views
1like
4Comments
Can´t download linpeas with wget
Privilege Escalation: Linux – Automated Enumeration Hi. I can´t download the linpeas with wget http://[Kali Desktop IP Address]:8000/LinPEAS/linpeas.sh due to "connection refused" or "connected but ERROR 404: File not found" Regards.
Solved
posewadone
4 months ago Place Help & Support Forum
619Views
2likes
8Comments
Nmap: Ep.8 – Scan Output
I need to read a token from the file located at "/home/kali/Desktop/token". I suspect that the telnet service running on port 22 is vulnerable, but telnet is not available on Kali Machine. I have tested all other services, and they appear to be secure. I am uncertain about the next steps to take.
Solved
Akshay
5 months ago Place Help & Support Forum
144Views
1like
3Comments
dotCMS Remote Code Execution (CVE-2022-26352)
Hi all, I completed all steps and got RCE, I thought I found the password but lab says its not valid. Please check the screenshots. Is it a lab error or..? Thanks in advance
Solved
AtakanBal
5 months ago Place Help & Support Forum
117Views
1like
3Comments
Return to Haunted Hollow: Haunted Helpdesk
Hello everyone, I'm stuck in Q2 of Return to Haunted Hollow (escalate to root). Does anyone have any hint about what binary or service can be exploited to elevate privileges? Kind regards,
Solved
T3S0r0
5 months ago Place Help & Support Forum
231Views
2likes
6Comments
Server-Side Request Forgery
I need help with step 5 and 6 of Server-Side Request Forgery lab. I was able to find the location of potential SSRF i.e "lookup?url=http://localhost:3000/online" after that I have tried directory traversal and other methods in place of HTTP (FTP). Nothing seems to working to get the bot name/service account
Solved
Akshay
6 months ago Place Help & Support Forum
236Views
1like
4Comments