Synoslabs

Nous contacter

Month: January 2024

Archives

Catégories

Articles récents

Tags

boat challenge cody credentials crypto ctf cve easy embed exif exploit geoint geolocation google google lense gralhix hacking hacktoria htb iis intelligence kernel linux location manipulation maps metadata metasploit metaverse mondayquiz osint php redirection reverse search social engineering social media socmint sofia santos street view thursdayquiz web web3 wifi windows writeup

  • 👽 Hacktoria – The Cartel Connection

    adm_synoslabs

    In the old Hacktoria challenge, we try to find the location of a Colombian cartel. Link: https://hacktoria.com/contracts/the-cartel-connection/ Briefing hints: National Police of Colombia yesterday afternoon at 14:37 Colombia Standard Time coastal regions Analyze There is a ship on the left but can’t identify it’s name. On the bottom, we can see something similar to rails.…

    Lire plus: 👽 Hacktoria – The Cartel Connection

  • 👽 Hacktoria – The Killer Clown

    adm_synoslabs

    This Hacktoria challenge was an old OSINT challenged available on their website. Link: https://hacktoria.com/contracts/the-killer-clown/ Verify we are in San Francisco: We know the victim lived near Northwest Berkeley in San Francisco. So we can check the potential parks in this area: After searching the parks, I found one that can correspond to our photo: There…

    Lire plus: 👽 Hacktoria – The Killer Clown

  • 👽 Hacktoria – Where’s Klumgongyn

    adm_synoslabs

    This writeup is related to an old Hacktoria challenge which is no longer accessible. Link: https://hacktoria.com/contracts/wheres-klumgongyn/ We don’t have any other information than the photo. There are multiple ways to find this location. I took the fastest one. Search on Google: my taxi 6882122 and found a Facebook page: https://www.facebook.com/groups/879392425455230/ So we know the city…

    Lire plus: 👽 Hacktoria – Where’s Klumgongyn

  • 💻 Cap – Writeup

    adm_synoslabs

    The name of the easy Linux box gives us useful hints… Add the hostname into /etc/hosts: … 10.10.10.245 cap.htb … First run a nmap scan to detect open ports: The nmap scan output is way too long so we’ll just focus on the important parts. The FTP server is not accessible using anonymous login and…

    Lire plus: 💻 Cap – Writeup

  • 💻 Buff – Writeup

    adm_synoslabs

    In this easy Windows machine we’ll exploit a buffer overflow! Add the IP address in /etc/hosts: … 10.10.10.198 blue.htb … First run a nmap scan: We add the -Pn option to nmap because this is a Windows machine and the ICMP protocol is filtered. So nmap cannot tell if the host is up or not.…

    Lire plus: 💻 Buff – Writeup

  • 💻 Blue – Writeup

    adm_synoslabs

    To exploit this Windows machine we’ll use an old but efficient vulnerability. Add the IP address in /etc/hosts: … 10.10.10.3 blue.htb … First run a nmap scan: There are only two interestng ports that are open: 139 and 445 which are SMB ports. All the other ones are basic RPC ports. If we try to…

    Lire plus: 💻 Blue – Writeup

  • 💻 Beep – Writeup

    adm_synoslabs

    This Linux machine is a bit special compared to other Linux challenges because this is a CentOS operating system. Add the IP address in /etc/hosts: … 10.10.10.7 beep.htb … First run a nmap scan: There is a lot of open ports on this machine. But most of them could be rabbit holes. If you have…

    Lire plus: 💻 Beep – Writeup

  • 💻 Bashed – Writeup

    adm_synoslabs

    This easy Linux challenge uses a vulnerable PHP file to execute commands on the system. Add the IP address in /etc/hosts: … 10.10.10.68 bashed.htb … First run a nmap scan: There’s only one port open which is an Apache web server. The version 2.4.18 is not vulnerable. On the website, the autor wrote about a…

    Lire plus: 💻 Bashed – Writeup

  • 💻 Antique – Writeup

    adm_synoslabs

    In this machine we’ll enumerate services and find a specific UDP port to perform enumeration on it. Add the IP address in /etc/hosts: … 10.10.11.107 antique.htb … First run a nmap scan. We must specify the -Pn option because the machine doesn’t respond to pings: When we try to connect to the telnet service port…

    Lire plus: 💻 Antique – Writeup

  • 🔍 OSINT Exercise 010

    adm_synoslabs

    Introduction Link: https://gralhix.com/list-of-osint-exercises/osint-exercise-010/ Difficulty: For beginners: a) Easy, b) Easy, c) Hard For experts: a) Easy, b) Easy, c) Medium Briefing: A Twitter user shared three photos of an event. Please answer the following questions: a) Which event is being celebrated in the photos? b) Which two photos were taken by the same person? c)…

    Lire plus: 🔍 OSINT Exercise 010