PicoCTF - Special

Start your instance to see connection details. Open up the terminal and connect using the following command. Enter the provided password. ssh -p 63194 [email protected] It seems that Linux commands are turned unusable. Special$ ls Is sh: 1: Is: not found Special$ whoami Whom sh: 1: Whom:

PicoCTF - flag_shop

There's a flag shop selling stuff, can you buy a flag? Source. Connect with nc jupiter.challenges.picoctf.org 44566. Open up the terminal and type the following command, in order to connect to the server. nc jupiter.challenges.picoctf.org 44566 #include <stdio.h> #include

PicoCTF - mus1c

We are being presented with the following text. I wrote you a song. Put it in the picoCTF{} flag format. First, download the file and read it through. There is a programming language called Rockstar that can be found in the following link. rockstar : home The song can be found

PicoCTF - plumbing

Sometimes you need to handle process data outside of a file. Can you find a way to keep the output from this program and search for the flag? Connect to jupiter.challenges.picoctf.org 14291. Right! Open up the terminal and type the following. nc jupiter.challenges.picoctf.org 14291

PicoCTF - Based

To get truly 1337, you must understand different data encodings, such as hexadecimal or binary. Can you get the flag from this program to prove you are on the way to becoming 1337? Connect with nc jupiter.challenges.picoctf.org 15130. nc jupiter.challenges.picoctf.org 15130 We are being

PicoCTF - ASCII Numbers

Convert the following string of ASCII numbers into a readable string: 0x70 0x69 0x63 0x6f 0x43 0x54 0x46 0x7b 0x34 0x35 0x63 0x31 0x31 0x5f 0x6e 0x30 0x5f 0x71 0x75 0x33 0x35 0x37 0x31 0x30 0x6e 0x35 0x5f 0x31 0x6c 0x6c 0x5f 0x74 0x33 0x31 0x31 0x5f 0x79 0x33 0x5f

PicoCTF - useless

There's an interesting script in the user's home directory. The work computer is running SSH. We've been given a script that performs some basic calculations, explores the script, and finds a flag. Open up the terminal and connect with SSH to the server. ssh

PicoCTF - repetitions

Can you make sense of this file? First, download the required file (enc_flag). The file is formatted in the base64 format. We need to decode it multiple times in order to get the flag. Here is the Python code that does just that. If you want to learn more

Online Account Storage

This is a Python GUI program, used for creating and storing online account information in a separate .json file. Let’s see first the UI setup using Tkinter. 💡UI Setup The setup is pretty simple and straightforward. At first, we create a canvas with specific dimensions that hold an image.

Memory Game

This is a Python program aimed at recalling and improving the overall memory of the individual using a series of random words and numbers. At first, the main program imports all the necessary libraries and files combined with an ASCII art logo. Then according to the user input, it calls

Binary Conversion

I wanted to create a Python program that takes binary input and converts them into a different format. So, here we go. The main.py is pretty straightforward, it just imports and calls the functions, presented by a series of options, regarding the intended action. 💡main.py import base64 import

Password Generator

I started to learn Python, because I noticed it is used a lot by Cyber Security professionals, and was something that I wanted to be proficient at. So, I decided to create a small program generating a random password using Python. First, let’s see the main.py file and

HackTheBox

HackTheBox - Synced

💡Task 1 What is the default port for rsync? First, as usual, run the following command in the terminal to scan the target machine for open ports using Nmap. nmap -sV -p- IP_ADDRESS Starting Nmap 7.80 ( https://nmap.org ) at 2023-06-15 14:37 EEST Stats: 0:00:16

HackTheBox

HackTheBox - Mongod

💡“In this machine, we will explore the mongodb environment as well as the way of connecting to it and accessing information that lives inside it. It is a very easy machine, but remember you have to master the absolute basics first and build a solid foundation, before going further."

HackTheBox

HackTheBox - Preignition

💡Task 1 Directory Brute-forcing is a technique used to check a lot of paths on a web server to find hidden pages. Which is another name for this? (i) Local File Inclusion, (ii) dir busting, (iii) hash cracking. dir busting 💡Task 2 What switch do we use for nmap’s

HackTheBox

HackTheBox - Explosion

💡Task 1 What does the 3-letter acronym RDP stand for? Remote Desktop Protocol 💡Task 2 What is a 3-letter acronym that refers to interaction with the host through a command line interface? cli 💡Task 3 What about graphical user interface interactions? gui 💡Task 4 What is the name of an

HackTheBox

HackTheBox - Redeemer

💡Task 1 Which TCP port is open on the machine? The following command will scan all of the ports of the target machine. nmap -sV IP_ADDRESS -p 0-65535 Starting Nmap 7.80 ( https://nmap.org ) at 2023-06-12 12:45 EEST Stats: 0:00:24 elapsed; 0 hosts completed (1

HackTheBox

HackTheBox - Dancing

💡Task 1 What does the 3-letter acronym SMB stand for? Server Message Block 💡Task 2 What port does SMB use to operate at? 445 💡Task 3 What is the service name for port 445 that came up in our Nmap scan? microsoft-ds nmap -sV IP_ADDRESS Host is up (0.

HackTheBox

HackTheBox - Fawn

💡Task 1 What does the 3-letter acronym FTP stand for? File Transfer Protocol 💡Task 2 Which port does the FTP service listen on usually? 21 💡Task 3 What acronym is used for the secure version of FTP? sftp 💡Task 4 What is the command we can use to send an

HackTheBox

HackTheBox - Meow

First, download the .ovpn file and open up the terminal as an administrator sudo su openvpn root.ovpn Wait a couple of seconds in order for the connection to be established. Click to get a target machine IP Address. ping {IP_ADDRESS} 💡Task 1 What does the acronym VM stand

picoCTF

PicoCTF - Permissions

First, click on the button ‘Launch Instance’. Then ssh to the remote machine using the presented command. Yours might be with different port or user credentials. ssh -p 50477 [email protected] Then navigate to the following folder using CLI. cd /challenge/ cat metadata.json That’s all!

picoCTF

PicoCTF - Moneyware

We need to find the malware name for a Bitcoin address. Bitcoin address is the following. 1Mz7153HMuxXTuR2R1t78mGSdzaAtNbBWX Just search for 1Mz7153HMuxXTuR2R1t78mGSdzaAtNbBWX malware and you will be able to find the flag. Here is a hint… picoCTF{P…a}

picoCTF

PicoCTF - Chrono

First, open up the terminal and connect to the server using SSH. ssh [email protected] -p 53143 You will have different port and password, so just enter those provided. When you are connected to the server navigate to the following path. cd /challenge cat metadata.json You will

picoCTF

PicoCTF - Big Zip

First, use wget to download the big-zip-files.zip file. Then unzip it. wget https://artifacts.picoctf.net/c/503/big-zip-files.zip unzip -u big-zip-files.zip There are a lot of files. We can not search all of them manually for a flag. So we can use the following command instead