Main Page

Pentesting • Web Exploitation • Cryptography • Forensics • Reversing • Binary Exploitation • CTF

TryHackMe, Jeff

Sun, 6 Sept 2020 22:00:00 +0000

This is the hardest TryHackMe challenge that I've done so far, but also the most interesting one. You'll need to go through many steps before accessing the user flag. It combines hidden locations, virtual hosts, password protected backup files, Wordpress enumeration, docker evasion, restricted bash evasion, and much more. Very nice challenge!

TryHackMe, Mindgames

Fri, 4 Sept 2020 21:03:00 +0000

The user flag is quite easy to get, but the root flag requires a privilege escalation that is a bit challenging. You'll need to exploit the capabilities of openssl and compile your own *.so library.

TryHackMe, Internal

Thu, 3 Sept 2020 17:11:00 +0000

Interesting challenge where you'll need to enumerate services, discover hidden directories, brute force accounts, create reverse shells. The challenging part will be to exploit a local Jenkins installation running in Docker, and exploit it to get the root flag.

TryHackMe, Develpy

Thu, 2 Jul 2020 21:33:00 +0000

boot2root machine for FIT and bsides Guatemala CTF. Interesting challenge with code injection in a python program running on a socket. Classical root escalation via the crontab jobs.

TryHackMe, djinn

Thu, 2 Jul 2020 06:50:00 +0000

Intermediate level vulnerable box. Great adventure with FTP, SSH, port knocking, python scripting, decompiling and evasion.

TryHackMe, Node 1

Fri, 26 Jun 2020 06:50:00 +0000

Node is a medium level boot2root challenge, originally created for HackTheBox. This challenge requires several techniques to exploit the machine, which makes it a great journey into hacking (nodejs, password cracking, password encrypted backup, privesc, exploit with mongodb, reverse engineering, ..). This is a great challenge!

TryHackMe, HA Joker CTF

Tue, 23 Jun 2020 12:00:00 +0000

Enumerate services, brute force accounts, discover a hidden backup, crack hashes and escalate privileges using a Linux container.

TryHackMe, Blueprint

Sun, 21 Jun 2020 09:11:00 +0000

Exploit a vulnerable OSCommerce web application hosted on a Windows 7 machine. Upgrade your shell session to a meterpreter in Metasploit, and dump the password hashes.