PREMISE The premise of the box is that a group of computer science students has created a password encryption/decryption tool. 👉 “What happens when a group of broke Computer Science students try to make a password manager? Obviously a perfect commercial success!” We are tasked with hacking our way into their server as the root … Read more
In this Capture the Flag (CTF) challenge walkthrough, I’ll hack into a windows service called Jenkins, find a way to carry out Remote Command Execution (RCE) by using Metasploit to gain access to the box and escalate my privileges to the NT AUTHORITY/SYSTEM, which is the equivalent of root on a Windows machine. ⚔️ Challenge: … Read more
In this CTF (Capture the Flag) walkthrough, we will be working through the TryHackMe challenge, Git Happens! If you don’t want any spoilers, I’d recommend trying out this free hacking challenge first before reading any further. You can also watch the video where I’ll walk you through the whole challenge: We’ll be hacking into a … Read more
In this CTF (Capture the Flag) challenge walkthrough, we will be hacking into an Apache Tomcat server using an exploit created by a Chinese developer. This exploit is available as a standalone Python file and as a Metasploit module. In the walkthrough video, I’ll demonstrate both methods of gaining an initial foothold into the box. … Read more
Have you seen the hacker-themed TV show Mr. Robot? This article is a write-up of the walkthrough video for the CTF (Capture The Flag) style hacking challenge, Mr. Robot, on TryHackMe. The challenge involves using standard pen-testing tools like nmap for enumeration and gobuster for brute-force directory sniffing. We will also make use of exploiting … Read more
The Pickle Rick CTF (capture the flag) challenge requires basic webhacking techniques including: The theme of the challenge is Rick and Morty, the animated tv show. The silly premise of this box is that we need to find the three hidden ingredients that Rick needs to change himself from a pickle back to a human. … Read more
Background I’ve been working on the Alice in Wonderland series of free hacking CTF (Capture the Flag) challenges on TryHackMe. 🚩 Recommended Tutorial: Capture the Flag – Alice in Wonderland – TryHackMe Walkthrough While working on the second box in the series, Looking Glass, I stumbled upon a bash script written by Tay1or, another user … Read more
In this article, I’ll guide you through the TryHackMe CTF (capture the flag 🚩) challenge Looking Glass. There will be spoilers in this write-up and walkthrough video, so stop reading now and click here if you want to try this free hacking challenge first without any hints. This is part of the hacking security series … Read more
In this blog post, I’ll show you how recreated a Python library hijacking vulnerability on my home network. The Wonderland box on TryHackMe was the inspiration for exploring this kind of vulnerability. In my previous Wonderland walkthrough blog post, I highlighted an example of exploiting the ‘random’ module to switch users without knowing their password. … Read more
This is part of the hacking security series on multiple TryHackMe challenges: Introduction Over the past few months, I’ve been working through the junior penetration tester career pathway on TryHackMe and doing hacking practice boxes on the side to keep applying my learning in practical settings. So far almost every hacking lab includes at least … Read more
KISS – Keep It Secure, Stupid! Since the beginning of days, Man, Woman, Beast, and even Plants, have shared one thing in common. The need and desire to salvage items around them to use as food, pleasure, and necessity. And with that came a need to secure these items for safe use in the future. … Read more
Problem Formulation and Solution Overview This article will show you how to generate password hashes in Python. To make it more interesting, we have the following running scenario: When new users join the Finxter Academy, they are asked for a password. How can we keep this data secure? To secure these passwords, we must convert … Read more