-
Cody Bernardy – Challenge 04
Read More: Cody Bernardy – Challenge 04This challenge can be solved in multiple ways. We’ll only focus on the fastest one but I encourage you to do it on your own. Link to the OSINT challenge video: https://www.youtube.com/watch?v=yv1gRPQcGhE I urge you to try by yourself before looking at this solution Solution As always when we try to solve this type of…
-
Cody Bernardy – Challenge 03
Read More: Cody Bernardy – Challenge 03This easy challenge will be solved using reverse image search and shows the power of such tools in investigations to identify objects and recognizable items on a photo. Link to the OSINT challenge video: https://www.youtube.com/watch?v=c4q7XrAy5g4 I urge you to try by yourself before looking at this solution Solution We wont lost any time and directly…
-
Cody Bernardy – Challenge 01
Read More: Cody Bernardy – Challenge 01In this first challenge, our goal is to geolocate where the video was recorded. A lot of elements are given directly by Cody but we’ll try to resolve this challenge without the hints he gives. Link to the OSINT challenge video: https://www.youtube.com/watch?v=f7mpY674ZvA I urge you to try by yourself before looking at this solution Solution…
-
💻 Mirai – Writeup
Read More: 💻 Mirai – WriteupDefault credentials we’ll be used on this machine to access it. Add the IP address in /etc/hosts: … 10.10.10.48 mirai.htb … First run a nmap scan: A lot of ports are open contrary to the other easy boxes. Let’s start with the website: It tells us that the machine is a Pi-hole version 3.1.4. We…
-
💻 Knife – Writeup
Read More: 💻 Knife – WriteupA backdoor is found on the web server of this machine. Add the IP address in /etc/hosts: … 10.10.10.242 knife.htb … First run a nmap scan: The website doesn’t give us anything useful: In the source code there is no link. Looking at Wappalyzer we get some versions: Apache 2.4.41 PHP 8.1.0 There is no…
-
💻 Jerry – Writeup
Read More: 💻 Jerry – WriteupWe’ll exploit a Tomcat functionnality to become Administrator of this Windows machine. Add the IP address in /etc/hosts: … 10.10.10.95 jerry.htb … First run a nmap scan: There is only one port open: We can search on Google for an exploit related to this version: There’s an ExploitDB exploit for this version. Let’s see if…
-
💻 Granny – Writeup
Read More: 💻 Granny – WriteupThis Windows machine looks a lot like another machine… Add the IP address in /etc/hosts: … 10.10.10.15 granny.htb … First run a nmap scan: We can run a directory fuzzing but nothing interesting is found: Here is the only page accessible on the website: This is a webdav server and there is a tool to…





