“During the investigation of the downloaded GitHub repo (OSINT task), elf Recon McRed identified a URL qa.santagift.shop that is probably used by all the elves with admin privileges to add or delete gifts on the Santa website. The website has been pulled down for maintenance, and now Recon McRed is…

“As the elves are trying to recover the compromised santagift.shop website, elf Recon McRed is trying to figure out how it was compromised in the first place. Can you help him in gathering open-source information against the website?” Question #1: What is the name of the Registrar for the domain…

“Santa’s Security Operations Center (SSOC) has noticed one of their web servers, santagift.shop has been hijacked by the Bandit Yeti APT group. Elf McBlue’s task is to analyse the log files captured from the web server to understand what is happening and track down the Bandit Yeti APT group.” Just…

Another year, another Advent of Cyber from TryHackMe! I am getting started a little late this year due to work obligations, but better late than never! New challenges will be released daily through-out December, and they are all super beginner friendly. Scenario: The Best Festival Company has been compromised yet again. “Someone is trying to stop Christmas this year and…

Hack the Boo is a CTF created by Hack the Box in celebration of Cybersecurity Month and Halloween. Reversing #1 — Cult Meeting

Easy linux machine to practice your skills Link to Room: https://tryhackme.com/room/lazyadmin I started with an nmap scan and found both SSH and a web server:

“This Rick and Morty themed challenge requires you to exploit a web server to find 3 ingredients that will help Rick make a potion to transform himself back into a human from a pickle.” Link to Box: https://tryhackme.com/room/picklerick Difficulty: Easy

I look forward to the SANS Holiday Hack event every year. It is always an absolute delight!

“McSkidy recently found out that a large amount of traffic is entering one system on the network. Use your traffic analysis skills to determine what kind of activities Grinch Enterprises are performing.” Link to Room: https://tryhackme.com/room/adventofcyber3# Question #1: In the HTTP #1 — GET requests section, which directory is found…