Written by shakuganzApril 25, 2022April 25, 2022

b01lers CTF 2022 Write-up (Pwn)

Hi everyone! This post is on b01lers CTF 2022’s pwn challenges which was held on 23/4 – 24/4. The pwn challenges are on using gets() and overflow to bypass strcmp() as well as string format attack to leak the flag located in heap memory. Let’s get started! 1. gambler_overflow Feeling luuuuuuuucky? You must create a flag.txt […]

Written by shakuganzMarch 30, 2022March 30, 2022

picoCTF 2022 Write-up (Binary Exploitation)

Hi everyone! This post is on picoCTF 2022 write-up for binary exploitation that was held from 16th March 2022 to 30th Mar 2022. In this CTF, there are buffer overflow, on stack shellcode execution, format string attack, function overwrite, C programming array out of bound (OOB) arbilitary write, stack cache, and vulnerable string check. Let’s […]

Written by shakuganzFebruary 27, 2022

Protected: Proving Grounds – Hawat Write-up

There is no excerpt because this is a protected post.

Written by shakuganzFebruary 26, 2022April 13, 2022

Protected: Proving Grounds – Heist Write-up

There is no excerpt because this is a protected post.

Written by shakuganzFebruary 24, 2022

Protected: Proving Grounds – Sybaris Write-up

There is no excerpt because this is a protected post.

Written by shakuganzFebruary 23, 2022April 13, 2022

Protected: Proving Grounds – Hutch Write-up

There is no excerpt because this is a protected post.

Written by shakuganzFebruary 21, 2022February 21, 2022

Protected: Proving Grounds – Tico Write-up

There is no excerpt because this is a protected post.

Written by shakuganzFebruary 18, 2022February 21, 2022

Protected: Proving Grounds – Medjed Write-up

There is no excerpt because this is a protected post.

Written by shakuganzFebruary 3, 2022July 8, 2022

HackTheBox – Pandora Write-up

Hi everyone! Today’s write-up is on Pandora, an easy GNU/Linux machine released on 10th January 2022. I won’t say the machine is easy if you are those who build the SQL injection exploit from scratch. Someone actually build the PoC exploit for an old CVE recently for this HackTheBox challenge so I leached on it. […]

Written by shakuganzJanuary 12, 2022January 12, 2022

TryHackMe – Attacktive Directory Write-up

Hi everyone! Today’s post is on a TryHackMe challenge on Attacktive Directory that will introduce to u Kerberos user enumeration using Kerbrute on Domain Controller (DC), AS-REP Roasting using GetNPUsers on DC, Hashcat to crack Kerberos hashes, dumping password hashes from DC, and using Evil-WinRM to access the DC. Let’s get started! 1. Deploy the […]