Category: Blog

  • Cody Bernardy – Challenge 04

    This challenge can be solved in multiple ways. We’ll only focus on the fastest one but I encourage you to do it on your own. Link to the OSINT challenge video: https://www.youtube.com/watch?v=yv1gRPQcGhE I urge you to try by yourself before looking at this solution Solution As always when we try to solve this type of…

    Read More: Cody Bernardy – Challenge 04
  • Cody Bernardy – Challenge 03

    This easy challenge will be solved using reverse image search and shows the power of such tools in investigations to identify objects and recognizable items on a photo. Link to the OSINT challenge video: https://www.youtube.com/watch?v=c4q7XrAy5g4 I urge you to try by yourself before looking at this solution Solution We wont lost any time and directly…

    Read More: Cody Bernardy – Challenge 03
  • Cody Bernardy – Challenge 01

    In this first challenge, our goal is to geolocate where the video was recorded. A lot of elements are given directly by Cody but we’ll try to resolve this challenge without the hints he gives. Link to the OSINT challenge video: https://www.youtube.com/watch?v=f7mpY674ZvA I urge you to try by yourself before looking at this solution Solution…

    Read More: Cody Bernardy – Challenge 01
  • 💻 Mirai – Writeup

    Default credentials we’ll be used on this machine to access it. Add the IP address in /etc/hosts: … 10.10.10.48 mirai.htb … First run a nmap scan: A lot of ports are open contrary to the other easy boxes. Let’s start with the website: It tells us that the machine is a Pi-hole version 3.1.4. We…

    Read More: 💻 Mirai – Writeup
  • 💻 Legacy – Writeup

    We’ll use a very famous CVE vulnerability to exploit this machine. Add the IP address in /etc/hosts: … 10.10.10.4 legacy.htb … First run a nmap scan: Only 2 ports seem interesting: 139 and 445 which are SMB ports. We can run some enumeration on them: We got some data but nothing really useful. smbclientdoesn’t return…

    Read More: 💻 Legacy – Writeup
  • 💻 Lame – Writeup

    We’ll try to gain root access to the easiest HTB machine. Add the IP address in /etc/hosts: … 10.10.10.3 lame.htb … First run a nmap scan: There are 4 open ports (port 3622 is a false positive): FTP: Anonymous login is allowed, meaning we can connect to it without any password. We can also check…

    Read More: 💻 Lame – Writeup
  • 💻 Knife – Writeup

    A backdoor is found on the web server of this machine. Add the IP address in /etc/hosts: … 10.10.10.242 knife.htb … First run a nmap scan: The website doesn’t give us anything useful: In the source code there is no link. Looking at Wappalyzer we get some versions: Apache 2.4.41 PHP 8.1.0 There is no…

    Read More: 💻 Knife – Writeup
  • 💻 Jerry – Writeup

    We’ll exploit a Tomcat functionnality to become Administrator of this Windows machine. Add the IP address in /etc/hosts: … 10.10.10.95 jerry.htb … First run a nmap scan: There is only one port open: We can search on Google for an exploit related to this version: There’s an ExploitDB exploit for this version. Let’s see if…

    Read More: 💻 Jerry – Writeup
  • 💻 Granny – Writeup

    This Windows machine looks a lot like another machine… Add the IP address in /etc/hosts: … 10.10.10.15 granny.htb … First run a nmap scan: We can run a directory fuzzing but nothing interesting is found: Here is the only page accessible on the website: This is a webdav server and there is a tool to…

    Read More: 💻 Granny – Writeup