This challenge was from the forensics category of Cyber Apocalypse 2022. For the challenge we had to download a PCAP file and analyze it. Analyzing the PCAP After opening the PCAP in Wireshark, I have inspected the files that got transfered. One of the file had the content type of image/png: I have…

Blinker Fluids was a Web challenge in Cyber Apocalypse 2022. The challenge files could be downloaded and to retrieve the flag we had to exploit a running instance. The vulnerability The vulnerability which we had to exploit is CVE-2021-23639 and it has a CVSS score of 9.8. …

This challenge was from the Forensics category and we were provided NT_USER.dat file to analyze. Analyzing the run keys Inside the run keys there was a suspicious powershell command: After decoding the base64 encoded data, it was possible to retrieve the source code:

The compressor challenge was from category Misc. We had to start an instance and connect to it via netcat. Connecting After connecting to the challenge, we were greeted with a menu. We could choose a component and then choose an action. The action will then run a specific command. Command Injection The actions are vulnerable to command injection:

The challenge was from Web category and we were provided the source code of the web application. Vulnerability The vulnerability is in the Database.php file, which passes the user input unsanitized to a SQL Query: The IP Address comes from SubscriberModel.php, which reads it from the HTTP headers.

This challenge was in the “Web” category of Cyber Apocalypse CTF. Landing Page The landing page shows an input box, for reporting an issue: The web app also have a functionality to login. So at that point I have thought about XSS and that is what I have tried to exploit. Exploiting XSS First…

Precious Guidance is a Forensics Challenge from Cyber Apocalypse 2022. Personally, I really liked that challenge, because it is quite realistic and made a lot of fun analyzing some malware :) Analyzing the VBScript From the challenge we were able to download a VBScript file. It was quite a long file, with definitions…

Going Deeper is a Pwn Challenge from Cyber Apocalypse 2022. Decompiling After decompilation with Ghidra there was an interesting function called admin_panel. It contains a subsroutine which checks for a specific input: Exploiting To exploit the challenge we had to start the instance and connect to it via Netcat. I have wrote the following script, which connects to the service and sends the string in line 29 to the service after selecting “Login” option:

This article contains two challenges, as both of them were pretty fast to do challenges. Space Pirate: Entrypoint Entrypoint is a Pwn challenge. After starting the challenge you have to connect to the challenge via Netcat. After connecting it shows a menu to insert a password. I have choosen the second options and then inserted the password “test”. I have done that just to tamper around with the challenge. Somehow I received the flag, without even doing much :D

The Wide challenge was in Reversing category. The challenge had a downloadable part, which contains an executable and a data file. In order to execute the executable you have to provide a path to the data file on the command line: ./wide db.ex Decompiling After decompilation we could see that there is a check for a specific password: If the check succeeds it will output something. Getting the flag