It’s been a few months since we popped a shell on Hack The Box. I didn’t fancy a migraine today though, so it’s just an easy box we’re going after. Starting with some basic enumeration, I ran nmap which never seemed to complete for some reason. I wasn’t really waiting […]
It seems a number of countries are becoming increasingly hostile to foreign news broadcasters. Whilst some would argue that the BBC is not impartial, I’m inclined to – mostly – disagree. In general, within the UK, I’d say they manage to annoy those on both sides of an argument. Conservatives […]
The BBC recently released an article regarding an announcement by the FBI pertaining to cyber attacks, which contained recommendations for athletes that would be attending the Beijing Olympics. The article, https://www.bbc.co.uk/news/technology-60215250 strangely though doesn’t cover the main reason why this is being suggested. A sizeable chunk of my technology and […]
Many people are already aware of the scams that start with Smishing (SMS Phishing). For the uninitiated, this is where a malicious actor sends SMS messages to try to get a victim to click a link. They normally suggest that a payment has failed and that the victim will lose […]
Shoppers of Angling Direct were in for a bit of a surprise recently if they navigated to the fishing stores website. Instead of being able to review the latest equipment to catch a big fish, they were directed to a well known pornography website. Checking their social media it, and […]
Recently I’ve had more than the average spam arriving in the inbox of my ‘throwaway’ account. It’s managing to get through the spam filters of Google, which is odd as generally I’d say they do a fair job in cleansing this sort of thing. The first thing I noted is […]
After a little bit of a holiday, I needed to get myself sharpened up again and so this ‘easy’ box was chosen for pwnage. One of my colleagues joined me for the first part of this exercise and we had a look at the foothold together. Sorry to disappoint, but […]
It was time for a forensics challenge today. The description suggested to me we’d be digging out the floppy disc for Volatility, a great tool for digging information out of memory dumps: Suspicious traffic was detected from a recruiter’s virtual PC. A memory dump of the offending VM was captured […]
Forge is a medium rated box released within the last couple of weeks on the HTB platform. It’s also the target for today! We start off with an nmap to reveal the attack surface. We can see that ftp is present but not available to us and, other than OpenSSH, […]
After hitting a couple of the discrete challenges recently, it was time to get back to full pwnership. This medium rated box was the dish of the day. Where would be without a quick nmap to see the attack surface. Here’s a slightly snipped version of what was returned. Being […]