-
💻 Knife – Writeup
Lire plus: 💻 Knife – WriteupA backdoor is found on the web server of this machine. Add the IP address in /etc/hosts: … 10.10.10.242 knife.htb … First run a nmap scan: The website doesn’t give us anything useful: In the source code there is no link. Looking at Wappalyzer we get some versions: Apache 2.4.41 PHP 8.1.0 There is no…
-
💻 Jerry – Writeup
Lire plus: 💻 Jerry – WriteupWe’ll exploit a Tomcat functionnality to become Administrator of this Windows machine. Add the IP address in /etc/hosts: … 10.10.10.95 jerry.htb … First run a nmap scan: There is only one port open: We can search on Google for an exploit related to this version: There’s an ExploitDB exploit for this version. Let’s see if…
-
💻 Granny – Writeup
Lire plus: 💻 Granny – WriteupThis Windows machine looks a lot like another machine… Add the IP address in /etc/hosts: … 10.10.10.15 granny.htb … First run a nmap scan: We can run a directory fuzzing but nothing interesting is found: Here is the only page accessible on the website: This is a webdav server and there is a tool to…
-
💻 Grandpa – Writeup
Lire plus: 💻 Grandpa – WriteupIn this machine we’ll exploit a kernel vulnerability to become Administrator. Add the IP address in /etc/hosts: … 10.10.10.14 grandpa.htb … First run a nmap scan: There is only one port open which is an HTTP service on port 80. It is detected as being a Windows machine running Microsoft IIS httpd 6.0. We can…
-
💻 Explore – Writeup
Lire plus: 💻 Explore – WriteupDuring this easy Android machine, we’ll exploit a known CVE. Add the IP address in /etc/hosts: … 10.10.10.247 explore.htb … First run a nmap scan: I cut a part of the output because the rest was garbage. The SSH banner, gives us a good hint to find the Android product: Banana Studio. A quick search…
-
💻 Devel – Writeup
Lire plus: 💻 Devel – WriteupIn this easy Windows machine, we’ll exploit a misconfiguration to become Administrator. Add the IP address in /etc/hosts: … 10.10.10.5 devel.htb … First run a nmap scan: Default web page: There is a FTP server running on port 21. We can connect to it as anonymous user. There is nothing interesting on it but we…
-
👽 Hacktoria – Florida Snow
Lire plus: 👽 Hacktoria – Florida SnowIn this challenge we start from a satellite view to identify the exact location of this place. Link: https://hacktoria.com/contracts/florida-snow/ Briefing hints: Mostly towards Spain and France And that’s all… Here is the original satellite image given for this contract: We can point some interesting things from this image: Taken from https://satellites.pro (red cross in the…
-
👽 Hacktoria – The Cartel Connection
Lire plus: 👽 Hacktoria – The Cartel ConnectionIn the old Hacktoria challenge, we try to find the location of a Colombian cartel. Link: https://hacktoria.com/contracts/the-cartel-connection/ Briefing hints: National Police of Colombia yesterday afternoon at 14:37 Colombia Standard Time coastal regions Analyze There is a ship on the left but can’t identify it’s name. On the bottom, we can see something similar to rails.…
-
👽 Hacktoria – The Killer Clown
Lire plus: 👽 Hacktoria – The Killer ClownThis Hacktoria challenge was an old OSINT challenged available on their website. Link: https://hacktoria.com/contracts/the-killer-clown/ Verify we are in San Francisco: We know the victim lived near Northwest Berkeley in San Francisco. So we can check the potential parks in this area: After searching the parks, I found one that can correspond to our photo: There…
Author: adm_synoslabs
Articles récents
Tags
boat challenge cody credentials crypto ctf cve easy embed exif exploit geoint geolocation google google lense gralhix hacking hacktoria htb iis intelligence kernel linux location manipulation maps metadata metasploit metaverse mondayquiz osint php redirection reverse search social engineering social media socmint sofia santos street view thursdayquiz web web3 wifi windows writeup