tsustyle

Aspiring Red Team

Warm Up

less than 1 minute read

img

img

Loose comparison. Only the value is checked, not the type of the variable.

https://github.com/spaze/hashes/blob/master/README.md

sha1 of 10932435112 = 0E07766915004133176347055865026311692244

sha1 of aaroZmOk = 0E66507019969427134894567494305185566735

That’ll do, pig.

http://chall.csivit.com:30272/?hash=aaroZmOk

csictf{typ3_juggl1ng_1n_php}

You may also enjoy

Doctor

 

‘Doctor’ is an easy rated box on Hack The Box. We’ll use FFuF to discover a hidden registration page, Server Side Template Injection to gain a shell and a public exploit for Spelunker to elevate our privileges

Academy

 

‘Academy’ is an easy rated box on Hack The Box. We’ll use FFuF to discover a hidden page, metasploit to explot Laravel for access and common enumeration for privilege escalation

THM Challenge

 

‘THM Challenge’ is a WebApp that I wrote to send along with my CV to TryHackMe when they were recruiting Content Engineers

Granny & Grandpa

 

Granny & Grandpa are a pair of identical easy rated boxes on Hack the Box. We’ll use metasploit to exploit a buffer overflow in IIS 6.0/WebDav for access and a kernel exploit for privesc