tsustyle

Aspiring Red Team

Warm Up

less than 1 minute read

img

img

Loose comparison. Only the value is checked, not the type of the variable.

https://github.com/spaze/hashes/blob/master/README.md

sha1 of 10932435112 = 0E07766915004133176347055865026311692244

sha1 of aaroZmOk = 0E66507019969427134894567494305185566735

That’ll do, pig.

http://chall.csivit.com:30272/?hash=aaroZmOk

csictf{typ3_juggl1ng_1n_php}

You may also enjoy

THM Challenge

 

‘THM Challenge’ is a WebApp that I wrote to send along with my CV to TryHackMe when they were recruiting Content Engineers

Granny & Grandpa

 

Granny & Grandpa are a pair of identical easy rated boxes on Hack the Box. We’ll use metasploit to exploit a buffer overflow in IIS 6.0/WebDav for access and a kernel exploit for privesc

Optimum

 

‘Optimum’ is an easy rated box on Hack the Box. We’ll exploit a vulnerable version of HttpFileServer for access and use Windows Exploit Suggester to find a kernel exploit for privesc

Bashed

 

‘Bashed’ is an easy rated box on Hack the Box. We’ll use gobuster to uncover some hidden directories on a webserver, use a custom bash/php client to gain a shell and exploit a script being run as a cronjob for root