The course for joining the SAS has sessions called a “Sickener”. These are where recruits are pushed and pushed, without any end in sight. Its as much a psychological battle as it is physical. Probably more the former in all honesty. This box is quite a close equivalent for the […]
Doing some DBA-ing recently I came across a table that contained dates and times for orders stored in a bit of an unusual way. Instead of having columns for date and for time, they were both stored in the same column as different rows! I hadn’t come across this before […]
This Windows challenge by Micah was a particularly meaty box with a lot of variety and some fairly real-world applications for what you learn. Our initial nmap scan showed we were dealing with a Windows DC running IIS 10. I used ffuf to see what things we might find on […]
There’s plenty of ways to do sandboxing for malware analysis. Say you want to use your own custom set-up, and specifically just want to rewrite the IP headers so that you can capture the outbound traffic to analyse or do ‘things’ to it. Any version of Linux can do this […]
I’m not especially fond of the words ‘Cyber’ or ‘Symposium’, even worse when they’re joined together. As I write this Mike Lindell is holding his CyberSymposium where he’s allegedly releasing packet captures that prove that ‘the election was stolen’. So you know where I stand: there’s yet to be a […]
For the first time I went after a machine very shortly after release. The Release Area gives you the chance to have the machine all to yourself on a standard VIP plan – a good enough reason if you ask me! Standard enumeration with nmap -A -oA htb -sV -sC […]
I started this off with some very standard enumeration, getting nmap and dirbuster up and running. There was clearly something web-like and interesting running on 5000/tcp but that wasn’t accessible from an external address. Also of interest was a reference that nmap discovered to ‘staging.love.htb’. It took me longer than […]
A lot has been written about GootLoader and the eventual malware that it drops (GootKit and/or REvil) by researchers far more knowledgable than myself – so I won’t tread too much on old ground. I happened to come across an incident involving GootLoader recently and was impressed at the level […]
Out of the box, any changes you make to your iptables on Linux will be discarded on reboot. That might not always be desirable. There’s a package sitting in the repos for Ubuntu that allows your changes to persist. sudo apt install iptables-persistent On install it offers the option to […]
Starting from scratch on a brand new domain. Because “why wouldn’t you”.