Cyber Blog​

Objective Challenge This is a super cool challenge where we have to talk to Chimney Scissorsticks in the netwars area for our Objective 6...

Objective Challenge This was a neat challenge that taught us about the rubber ducky USB device. The work flow for this challenge is to...

SQL Injection, Hydra SSH BF, Post fix disclaimer, Cron - apt.confd

Objective Challenge In this challenge, we are tasked with a terminal challenge in order to receive hints for Objective 5. This challenge...

Engagement flow Summary This was a really cool machine that started off with web enumeration, leading to a login bypass in which we had...

Objective Challenge In this challenge we are tasked with taking our total coin count above 1000 and this will result in Jack Frosts...

Objective Challenge In this challenge, we are tasked with solving a fun bit wise operator challenge, in order to receive the hint, and...

Greasy GopherGuts needs our help with grepping through some nmap results and invites us to activate the terminal. 1. What port does...

Objective Challenge This is really cool challenge that we never expected. I recall in previous KringleCon challenges we were also...

Objective Challenge This challenge is pretty straight forwards and just invites us to look around the castle and get familiar with lay of...

Objective Challenge We speak with Piney Sappington to kick things off as the pre-curser to objective 2. He goes on to explain that our...

Welcome to the SANS Kringlecon 2021 holiday hack challenge. We start off here in a little courtyard outside of KringleCon where we are...

This challenge deals with content discover, auth bypass, dirbusting.

Working with cookie manipulation, encoding and formatting.

This task deals with IDOR vulnerabilities.

git review, ssl ssrf, rev proxy, sym link, ansible playbook,

IDOR, cluster bomb, DNS Poisonings, MITM, Time synch

XXE injection with PHP was the main focus of this machine.

Subdomain enum, SSTI, app armor bypass (GTFO),

SSH pass, ADB , EsFileExplore, SSH port forwarding,

Work flow Summary This was a rather difficult machine that involves command injection with bad character encoding for initial foothold,...

Summary This was an amazing machine that involved insecure file sharing services that provided credentials for an SQL server connection...

This was an amazing machine created by ippsec that required "second order" SQL injection. This provides the surface area to inject a webshel

An extremely easy box that really shows the range of difficulties which can be within the "easy" band of Hack the box difficulties