Подмена страницы интернет-банка First Partner Bank на Standoff 365
Привет, Хабр! Будем знакомы — grizzzer, участник различных CTF-команд и независимый исследователь кибербезопасности. В этой статье разберу, как я ре…
Tech news from the best sources
Привет, Хабр! Будем знакомы — grizzzer, участник различных CTF-команд и независимый исследователь кибербезопасности. В этой статье разберу, как я ре…
Overview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kuber…
Summary The Brunnerne Inc. internal wiki sits behind layered infrastructure. Direct access to /wiki/internal/flag (hinted by robots.txt ) returns a…
Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-en…
TL;DR A .pcapng capture shows a victim host on 192.168.1.141 downloading a Python keylogger ( updates.py ) from an attacker-controlled "hotel update…
Summary The "Void Whispers" mail-settings panel passes the user-supplied sendMailPath field directly into shell_exec("which $sendMailPath") with no…
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login . The obvious attack surface — NoS…
Executive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's…
Challenge We're given two files, file1.txt and file2.txt , each containing what looks like a long, random blob of letters, digits, and symbols — one…
Category: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip , a 63 KB archive. $…
Challenge We're given secret.txt , a single line of comma-separated tuples wrapped in what looks like braces and underscores: (4, 17), (2, 16), (2,…
Category: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip cont…
Summary pscheme.py implements a toy "encryption" scheme that encodes each 4-byte chunk of the flag as extra roots multiplied directly into a public…
Executive Summary FireFlow is a Linux machine running a fictional "Task Force Nightfall" intelligence platform. The web application exposes a Langfl…
Executive Summary JobTwo is a Windows Server 2022 machine that simulates a realistic corporate phishing and privilege escalation scenario. The attac…
Introduction The CRTA exam by CyberWarFare Labs is a fully hands-on, black-box red team assessment. There are no multiple-choice questions. You eith…
Сегодня у нас на обзоре занимательная машинка от Vulnhub: DC-1 от автора DCAU. По ощущениям предназначена для уровня Beginner/Intermediate, хотя сам…