Aleyna
Kişisel olarak hayatta yapmayı sevdiğim işlere yer verdiğim blogumda sadece ben değil arkadaşlarımın yazılarınada yer veriyorum. Bilgiler paylaştıkça çoğalır ve temelde sitemiz de bu görüş etkin.
Lab link. Questions 1. What is the OTP flag? If we run the command frida-trace ./TryUnlockMe -i ‘libaocgame.so!*’, it will automatically start tracing all the functions. The penguin is requesting a PIN code, which is handled by the _Z7set_otpi function. The _Z7set_otpi function manages the OTP process. We open the file in Visual Studio Code …
Lab link. Questions 1. What is the technical term for a set of rules and instructions given to a chatbot? system prompt 2. What query should we use if we wanted to get the “status” of the health service from the in-house API? Use the health service with the query: status 3. After achieving a …
Lab link. Questions 1. Extract all the events from the cctv_feed logs. How many logs were captured associated with the successful login? 642 2. What is the Session_id associated with the attacker who deleted the recording? rij5uu4gt204q0d3eb7jj86okt 3. What is the name of the attacker found in the logs, who deleted the CCTV footage?
Lab link. Questions 1. What is the password for backupware that was leaked? az ad user list –filter “startsWith(‘wvusr-‘, displayName)” R3c0v3r_s3cr3ts! 2. What is the group ID of the Secret Recovery Group? 7d96660a-02e1-4112-9515-1762d0cb66b7 3. What is the name of the vault secret? az account clearaz login -u wvusr-backupware@aoc2024.onmicrosoft.com -p R3c0v3r_s3cr3ts! az keyvault list az keyvault …
Lab link. Questions 1. On what day was Glitch_Malware last logged in? Answer format: DD/MM/YYYY 07/11/2024 2. What event ID shows the login of the Glitch_Malware user? 4624 3. Read the PowerShell history of the Administrator account. What was the command that was used to enumerate Active Directory users? notepad “$env:APPDATA\Microsoft\Windows\PowerShell\PSReadLine\ConsoleHost_history.txt” Get-ADUser -Filter * -Properties …
Lab link. Questions 1. What is the name of the CA that has signed the Gift Scheduler certificate? THM 2. Look inside the POST requests in the HTTP history. What is the password for the snowballelf account? c4rrotn0s3 3. Use the credentials for any of the elves to authenticate to the Gift Scheduler website. What is the …
Lab link. Questions 1. What is the value of Flag1? 2. What is the value of Flag2?
Lab link. 1. What is the flag value after transferring over $2000 from Glitch’s account? We send the POST /transfer request to the repeater. I wanted to send 500 dollars, so I multiplied the request so much that it exceeded 2000 dollars. Then, I made a requests group and sent it as a parallel. Then …
Lab link. Lab Summary Wi-Fi is the technology that connects our devices to the internet wirelessly. A router connects our devices to the internet via Wi-Fi. To connect to the router, our devices create an SSID (Wi-Fi network name) list and join the network by entering a password (PSK – Pre-Shared Key). WPA/WPA2 uses a …
Lab link. Questions 1. What is the flag value inside the flag.txt file that’s located on the Administrator’s desktop? 1. Creating the Malicious Document Metasploit Framework is started with the msfconsole command. It is a tool used to initiate an attack. msfconsole Payload is the code that will be executed on the target system after a successful …