ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
Posts by Tag
- Static Malware Analysis 38
- Dynamic Malware Analysis 31
- CTF 26
- Technical 25
- Malware Analysis 24
- PMA 23
- No Starch Press 21
- HTB 20
- Nmap 17
- x86 Disassembly 17
- IDA Pro 15
- Injector 11
- PE-bear 8
- .NET 8
- .NET Decompilation 8
- Dnspy 8
- Strings 7
- CyberChef 7
- Ghidra 7
- Python 6
- Holiday Hack Challenge (HHC) 6
- Kringlecon 6
- SANS 6
- CounterHack 6
- PEview 6
- Process Monitor (Procmon) 6
- OllyDbg 6
- Gobuster 5
- T1546 - Event Triggered Execution 5
- HxD 5
- Masquerading 5
- XOR 5
- Pestudio 5
- C++ 5
- SMB 4
- Resource Hacker 4
- Debugging 4
- Mutex 4
- Shellcode 4
- ApateDNS 4
- x64 Disassembly 4
- Yara 4
- Netcat 3
- SSH 3
- FTP 3
- Smbclient 3
- Curl 3
- Snort 3
- Forensics 3
- T1218 - System Binary Proxy Execution 3
- PEiD 3
- UPX 3
- Packing 3
- COM Object 3
- Breakpoints 3
- Hooking 3
- Keylogger 3
- Credential Stealer 3
- Rundll32 3
- Process Explorer (ProcExp) 3
- Fakenet-NG 3
- Exceptions 3
- Structures (Structs) 3
- Endianness 3
- MSFVenom 2
- Apache 2
- Git 2
- Java 2
- Readpst 2
- Metasploit 2
- Hashcat 2
- Base64 2
- SUID 2
- Searchsploit 2
- T1078 - Valid Accounts 2
- T1505 - Server Software Component 2
- SQL 2
- Powershell 2
- Penetration Testing 2
- T1543.003 - Windows Service 2
- T1543 - Create or Modify System Process 2
- DFIR 2
- Cheatsheet 2
- PowerShell 2
- Rootkit 2
- WinDbg 2
- Process Hacker 2
- stdcall 2
- Scdbg 2
- CFF Explorer VIII 2
- Wireshark 2
- Immunity Debugger 2
- ServiceDLL 2
- Malware 2
- Analysis 2
- Practical 2
- Lab 2
- Reverse 2
- Engineering 2
- Detect-It-Easy (DIE) 2
- Link List Traversal 2
- FLARE VM 2
- Java Decompilation 2
- Recaf 2
- Reflection 2
- Dark Tortilla Crypter 2
- de4dot 2
- LummaC2 2
- Detect-It-Easy 2
- MS17-010 1
- EternalBlue 1
- PHPBash 1
- Sudo 1
- Jenkins 1
- Groovy 1
- Snapshot 1
- KeePass 1
- PTH 1
- RelayHash 1
- ADS 1
- Pth-winexe 1
- JTR 1
- John 1
- Achat 1
- Icacls 1
- SMTP 1
- James 1
- Cron 1
- XXE 1
- XML 1
- Tomcat 1
- JSP 1
- Msfvenom 1
- Certutil 1
- Runas 1
- Cmdkey 1
- Mdbtools 1
- Enum4linux 1
- Cpassword 1
- gpp-decrypt 1
- GetUserSPNs 1
- Node.js 1
- GraphQL 1
- HelpDeskZ 1
- GCC 1
- Xxd 1
- Bzip 1
- Pspy 1
- BGP 1
- SNMP 1
- Injection 1
- Zabbix 1
- Jsonrpc 1
- Perl 1
- T1505.003 - Web Shell 1
- T1190 - Exploit Public-Facing Application 1
- T1095 - Non-Application Layer Protocol 1
- T1222 - File and Directory Permissions Modification 1
- T1222.002 - Linux and Mac File and Directory Permissions Modification 1
- Burpsuite 1
- LFI 1
- Webapp 1
- Tac 1
- Getcap 1
- PKI 1
- Masscan 1
- Crackmapexec 1
- Puttygen 1
- Doas 1
- SSH-Keygen 1
- Steghide 1
- TTY 1
- Chmod 1
- Stego 1
- IRC 1
- Vim 1
- SQLite3 1
- DB 1
- DeBruijn 1
- Trufflehog 1
- Bloodhound 1
- EvtxDump 1
- Sed 1
- DDE 1
- Http2 1
- SSL 1
- Pcap 1
- Sniffing 1
- Gdb 1
- DNS 1
- Reversing 1
- Cryptography 1
- PlaintextPasswords 1
- PRTG 1
- Config 1
- Grep 1
- SAM 1
- PWDump 1
- mRemoteNG 1
- Guestmount 1
- SCP 1
- Windows 1
- Impacket 1
- Mssqlclient 1
- Macro 1
- Olevba 1
- Responder 1
- Powersploit 1
- T1505.001 - SQL Stored Procedures 1
- T1059.003 - Windows Command Shell 1
- T1059.001 - PowerShell 1
- T1059 - Command and Scripting Interpreter 1
- T1059.006 - Python 1
- T1552.006 - Group Policy Preferences 1
- T1552 - Unsecured Credentials 1
- Psexec 1
- DEFCON 1
- FTK Imager 1
- Autopsy 1
- Live Response 1
- Volatility 1
- Deadbox 1
- HexEdit 1
- T1546.015 - Component Object Model Hijacking 1
- T1197 - BITS Jobs 1
- T1546.008 - Accessibility Features 1
- T1055 - Process Injection 1
- T1546.010 - AppInit DLLs) 1
- T1127 - Trusted Developer Utilities Proxy Execution 1
- T1127.001 - MSBuild 1
- T1027 - Obfuscated Files or Information 1
- T1027.004 - Compile After Delivery 1
- T1091 - Replication Through Removable Media 1
- System Binary Proxy Execution - T1218 1
- T1218.004 - InstallUtil 1
- T1546.001 - Change Default File Association) 1
- T1548 - Abuse Elevation Control Mechanism 1
- T1548.002 - Bypass User Account Control 1
- T1546.012 - Image File Execution Options Injection 1
- T1218.003 - CMSTP 1
- T1550 - Use Alternate Authentication Material 1
- T1550.002 - Pass the Hash 1
- T1557 - Adversary-in-the-Middle 1
- T1557.001 - LLMNR/NBT-NS Poisoning and SMB Relay 1
- T1218.002 - Control Panel 1
- T1218.005 - Mshta 1
- T1021 - Boot or Logon Initialization Scripts 1
- T1037.001 - Logon Script (Windows) 1
- T1021 - Remote Services 1
- T1021.006 - Windows Remote Management 1
- T1053 - Scheduled Task/Job 1
- T1053.005 - Scheduled Task 1
- T1074 - Data Staged 1
- T1074.001 - Local Data Staging 1
- T1087 - Account Discovery 1
- T1113 - Screen Capture 1
- T1090 - Proxy 1
- T1556 - Modify Authentication Process 1
- T1556.002 - Password Filter DLL 1
- Input Capture - T1056 1
- T1056.004 - Credential API Hooking 1
- OSCP 1
- VirusTotal 1
- Malcode Analyst Pack 1
- Dependency Walker 1
- Exeinfo PE 1
- PE Detective 1
- IOCTL Driver 1
- DeviceIoControl 1
- EPROCESS 1
- Symbolic Link 1
- Kernel Debugging 1
- COM serial port 1
- Named Pipe 1
- Windows Firewall 1
- System Service Descriptor Table (SSDT) 1
- KiServiceTable 1
- Graphical Identification and Authentication (GINA) 1
- Professional PE file Explorer - PPEE (Puppy) 1
- AppInit_DLLs 1
- SMTP Daemon 1
- Fakenet 1
- 010 Editor 1
- FindCrypt2 1
- Krypto ANALyzer (KANAL) 1
- IDA-Ent 1
- FindCrypt-Ghidra 1
- WhatIsMyBrowser 1
- PfSSense 1
- Anti-Disassembly 1
- Anti-Debugging 1
- ScyllaHide 1
- TitanHide 1
- HideDebug 1
- Thread Local Storage 1
- Anti-Virtual Machine 1
- ScoopyNG 1
- VmwareHardenedLoader 1
- SIDT - Red Pill Technique 1
- STR 1
- SLDT - No Pill Technique 1
- SGDT 1
- SMSW 1
- IN 1
- CPUID 1
- Maclookup 1
- Original Entry Point (OEP) 1
- OllyDump 1
- PEiD Generic Unpacker 1
- Snaker's Generic Unpacker 1
- ImpREC 1
- POPAD 1
- PUSHAD 1
- POPFD 1
- PUSHFD 1
- ASPack 1
- UPack 1
- PE Explorer 1
- Upack Unpacker 1
- Shellcode_launcher 1
- Blob Runner 1
- Position-Independent Code (PIC) 1
- NOP Sled/Slide 1
- LODSB 1
- STOSB 1
- PDFStreamDumper 1
- Virtual Machine 1
- Vtables 1
- Overloading and Mangling 1
- Inheritance and Function Overriding 1
- Virtual and Non-Virtual Functions 1
- XAMPP 1
- FileZilla 1
- Leaf and Nonlead Functions 1
- Prologue and Epilogue Code 1
- WOW64 Subsystem 1
- Processs Monitor (Procmon) 1
- Cutter 1
- x64Dbg 1
- x32Dbg 1
- Pesstudio 1
- BinDiff 1
- HashMyFiles 1
- Regshot 1
- FakeNet 1
- Process Hollowing 1
- Abstraction 1
- Memory 1
- Assembly Instructions 1
- x86 Opcodes 1
- Operands 1
- Registers 1
- x86 Logical Operators 1
- Stack 1
- Conditionals 1
- Branching 1
- Buffers 1
- C 1
- Variables 1
- Arithmetic 1
- cdecl 1
- fastcall 1
- Binary Patching 1
- YarGen 1
- MalQuery 1
- Hybrid Analysis 1
- STRRAT 1
- Strigoi 1
- Sigma 1
- Crimson Shadow 1
- GoAccess 1
- Java Decompiler (JD-GUI) 1
- JavaScript 1
- CarLambo 1
- Allatori Java Obfuscator 1
- PBKDF2 1
- AES 1
- Urlscan 1
- OSINT 1
- RAT 1
- Redline Stealer 1
- Miscellaneous 1
- Twitter 1
- Aspmuma 1
- Webshell 1
- ASPX 1
- Remcos 1
- RC4 1
- Game Hacking 1
- Pwn Adventure 1
- Pwnie Island 1
- Windbg 1
- Cheat Engine 1
- Key Generation 1
- Integer Overflow 1
- Integer Underflow 1
- Race Condition 1
- Memory Analysis 1
- Cobalt Strike Stager 1
- Cyberchef 1
- Snake Keylogger 1
- Android Malware 1
- JADX 1
- Spyware 1
- PowerShell Webhook Clipper 1
- Clipper 1
- AgentTesla 1
- SFX 1
- Havoc 1
- Demon 1
- Xworm Loader 1
- Steganography 1
- Duvet Stealer 1
- BBY Stealer 1
- VSCode 1
- Electron 1
- NodeJS 1
- Fakebat Malware 1
- MSIX 1
- IDAT Loader 1
- AsyncRAT Injector 1
- TURS Agent 1
- Cryptoshuffler 1
- .JAR 1
- AMOS 1
- Atomic MacOS Stealer 1
- Mac-O 1
- Formbook Downloader 1
- LECmd 1
- LNK 1
- PE-Bear 1
- Scylla 1
- x64dbg 1
- x32dbg 1
- API Monitor 1
- FakeNet-NG 1
- ClearFake 1
- Fake Browser Update 1
- pestudio 1
- FLOSS 1
- Incident 1
- Response 1
- IR 1
Static Malware Analysis
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
FormBook Downloader - Malware Analysis Lab
Analysis of a LNK which acts as a FormBook download cradle hosted on a compromised WordPress website.
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Fakebat Malware - Malware Analysis Lab
Analysis of Fakebat Malware a malware-as-a-service downloader
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Dark Tortilla Crypter - Malware Analysis Lab
Analysis of an Agent Tesla sample which has been wrapped using the Dark Tortilla Crypter.
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
PowerShell Webhook Clipper - Malware Analysis Lab
Analysis of a PowerShell script which takes the contents of your clipboard and exfiltrates it to a webhook any time you use CTRL + C
Android Malware - Malware Analysis Lab
Analysis of an Android application which proxies requests and sends specific URLs accessed to remote advertising servers
Snake Keylogger - Malware Analysis Lab
Analysis of the Snake Keylogger and how it steals information from your system
Cobalt Strike Stager - Malware Analysis Lab
Analysis of a Cobalt Strike Stager using CyberChef and then supporting findings with specific Python scripts
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Dynamic Malware Analysis
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Dark Tortilla Crypter - Malware Analysis Lab
Analysis of an Agent Tesla sample which has been wrapped using the Dark Tortilla Crypter.
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
PowerShell Webhook Clipper - Malware Analysis Lab
Analysis of a PowerShell script which takes the contents of your clipboard and exfiltrates it to a webhook any time you use CTRL + C
Snake Keylogger - Malware Analysis Lab
Analysis of the Snake Keylogger and how it steals information from your system
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
CTF
đ đ SANS 2023 Holiday Hack Challenge (HHC) - A Holiday Odyssey đšđď¸
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2023, I successfully c...
đ đ SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2022, I successfully c...
đ đ SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2021, I successfully c...
đ đ SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2020, I successfully c...
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
đ đ SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2019, I successfully c...
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
Technical
đ đ SANS 2023 Holiday Hack Challenge (HHC) - A Holiday Odyssey đšđď¸
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2023, I successfully c...
đ đ SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2022, I successfully c...
đ đ SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2021, I successfully c...
đ đ SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2020, I successfully c...
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
đ đ SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2019, I successfully c...
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
Malware Analysis
Aspmuma 2009 âxxooxxâ - Malware Analysis Lab
Analysis of a web shell Iâve named Aspmuma 2009 âxxooxxâ.
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 2 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PMA
Practical Malware Analysis - Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 2 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
No Starch Press
Practical Malware Analysis - Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 2 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
HTB
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
Nmap
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
x86 Disassembly
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
IDA Pro
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Injector
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PE-bear
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
.NET
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Dark Tortilla Crypter - Malware Analysis Lab
Analysis of an Agent Tesla sample which has been wrapped using the Dark Tortilla Crypter.
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
Snake Keylogger - Malware Analysis Lab
Analysis of the Snake Keylogger and how it steals information from your system
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
.NET Decompilation
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Dark Tortilla Crypter - Malware Analysis Lab
Analysis of an Agent Tesla sample which has been wrapped using the Dark Tortilla Crypter.
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
Snake Keylogger - Malware Analysis Lab
Analysis of the Snake Keylogger and how it steals information from your system
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
Dnspy
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Dark Tortilla Crypter - Malware Analysis Lab
Analysis of an Agent Tesla sample which has been wrapped using the Dark Tortilla Crypter.
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
Snake Keylogger - Malware Analysis Lab
Analysis of the Snake Keylogger and how it steals information from your system
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
Strings
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
CyberChef
FormBook Downloader - Malware Analysis Lab
Analysis of a LNK which acts as a FormBook download cradle hosted on a compromised WordPress website.
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Ghidra
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Python
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
Cobalt Strike Stager - Malware Analysis Lab
Analysis of a Cobalt Strike Stager using CyberChef and then supporting findings with specific Python scripts
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Holiday Hack Challenge (HHC)
đ đ SANS 2023 Holiday Hack Challenge (HHC) - A Holiday Odyssey đšđď¸
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2023, I successfully c...
đ đ SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2022, I successfully c...
đ đ SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2021, I successfully c...
đ đ SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2020, I successfully c...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
đ đ SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2019, I successfully c...
Kringlecon
đ đ SANS 2023 Holiday Hack Challenge (HHC) - A Holiday Odyssey đšđď¸
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2023, I successfully c...
đ đ SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2022, I successfully c...
đ đ SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2021, I successfully c...
đ đ SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2020, I successfully c...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
đ đ SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2019, I successfully c...
SANS
đ đ SANS 2023 Holiday Hack Challenge (HHC) - A Holiday Odyssey đšđď¸
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2023, I successfully c...
đ đ SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2022, I successfully c...
đ đ SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2021, I successfully c...
đ đ SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2020, I successfully c...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
đ đ SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2019, I successfully c...
CounterHack
đ đ SANS 2023 Holiday Hack Challenge (HHC) - A Holiday Odyssey đšđď¸
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2023, I successfully c...
đ đ SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2022, I successfully c...
đ đ SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2021, I successfully c...
đ đ SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2020, I successfully c...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
đ đ SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In December 2019, I successfully c...
PEview
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Process Monitor (Procmon)
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
OllyDbg
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Gobuster
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
T1546 - Event Triggered Execution
MITRE ATT&CK⢠Analysis - T1546.012 Image File Execution Options Injection
Various tests involving methods outlined within the MITRE ATT&CK framework.
MITRE ATT&CK⢠Analysis - T1546.001 Change Default File Association
Various tests involving methods outlined within the MITRE ATT&CK framework.
MITRE ATT&CK⢠Analysis - T1546.010 AppInit DLLs
Various tests involving methods outlined within the MITRE ATT&CK framework.
MITRE ATT&CK⢠Analysis - T1546.008 Accessibility Features
Various tests involving methods outlined within the MITRE ATT&CK framework.
MITRE ATT&CK⢠Analysis - T1546.015 Component Object Model Hijacking
Various tests involving methods outlined within the MITRE ATT&CK framework.
HxD
FormBook Downloader - Malware Analysis Lab
Analysis of a LNK which acts as a FormBook download cradle hosted on a compromised WordPress website.
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Masquerading
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
XOR
Practical Malware Analysis - Chapter 5 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Pestudio
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
C++
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
SMB
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
Resource Hacker
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Debugging
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Mutex
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Shellcode
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Cobalt Strike Stager - Malware Analysis Lab
Analysis of a Cobalt Strike Stager using CyberChef and then supporting findings with specific Python scripts
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
ApateDNS
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
x64 Disassembly
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Yara
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Netcat
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
SSH
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
FTP
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Smbclient
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Curl
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Snort
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Forensics
Digital Forensics and Incident Response
Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
T1218 - System Binary Proxy Execution
MITRE ATT&CK⢠Analysis - T1218.005 Mshta
Various tests involving methods outlined within the MITRE ATT&CK framework.
MITRE ATT&CK⢠Analysis - T1218.002 Control Panel
Various tests involving methods outlined within the MITRE ATT&CK framework.
MITRE ATT&CK⢠Analysis - T1218.003 CMSTP
Various tests involving methods outlined within the MITRE ATT&CK framework.
PEiD
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
UPX
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Packing
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
COM Object
Practical Malware Analysis - Chapter 7 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Breakpoints
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Hooking
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Keylogger
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Credential Stealer
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Rundll32
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Process Explorer (ProcExp)
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 12 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Fakenet-NG
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Exceptions
Practical Malware Analysis - Chapter 8 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Structures (Structs)
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Endianness
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
MSFVenom
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
Apache
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
Git
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Java
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Readpst
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Metasploit
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Hashcat
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Base64
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
SUID
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Searchsploit
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1078 - Valid Accounts
MITRE ATT&CK⢠Analysis - T1078 Valid Accounts
Various tests involving methods outlined within the MITRE ATT&CK framework.
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1505 - Server Software Component
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
SQL
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Powershell
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Penetration Testing
OSCP and Penetration Testing
Cyber Security resources for OSCP and penetration testing.
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1543.003 - Windows Service
MITRE ATT&CK⢠Analysis - T1543.003 Windows Service
Various tests involving methods outlined within the MITRE ATT&CK framework.
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1543 - Create or Modify System Process
MITRE ATT&CK⢠Analysis - T1543.003 Windows Service
Various tests involving methods outlined within the MITRE ATT&CK framework.
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
DFIR
Digital Forensics and Incident Response
Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Cheatsheet
Digital Forensics and Incident Response
Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.
OSCP and Penetration Testing
Cyber Security resources for OSCP and penetration testing.
PowerShell
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Rootkit
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
WinDbg
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Process Hacker
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
stdcall
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Scdbg
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
CFF Explorer VIII
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Wireshark
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Immunity Debugger
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
ServiceDLL
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Malware
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Analysis
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Lab
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Reverse
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Engineering
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Detect-It-Easy (DIE)
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Link List Traversal
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
FLARE VM
Practical Malware Analysis - Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Practical Malware Analysis - Chapter 2 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Java Decompilation
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Recaf
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Reflection
Android Malware - Malware Analysis Lab
Analysis of an Android application which proxies requests and sends specific URLs accessed to remote advertising servers
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
Dark Tortilla Crypter
Dark Tortilla Crypter - Malware Analysis Lab
Analysis of an Agent Tesla sample which has been wrapped using the Dark Tortilla Crypter.
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
de4dot
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
LummaC2
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
Detect-It-Easy
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
MS17-010
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
EternalBlue
Hack The Box - Blue
Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...
PHPBash
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Sudo
Hack The Box - Bashed
Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...
Jenkins
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Groovy
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Snapshot
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
KeePass
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
PTH
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
RelayHash
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
ADS
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Pth-winexe
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
JTR
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
John
Hack The Box - Jeeves
Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...
Achat
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
Icacls
Hack The Box - Chatterbox
Chatterbox was a reasonably simple machine which required exploiting a vulnerable âAchatâ service with custom shellcode, and then migrating to a more stable ...
SMTP
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
James
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
Cron
Hack The Box - Solidstate
This machine contained a fairly straightforward SMTP vulnerability which didnât even need to be exploited to fully compromise the machine. It is an essential...
XXE
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
XML
Hack The Box - Dev0ops
Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...
Tomcat
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
JSP
Hack The Box - Jerry
Jerry would have to be one of the easiest machines Iâve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...
Msfvenom
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Certutil
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Runas
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Cmdkey
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Mdbtools
Hack The Box - Access
This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...
Enum4linux
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Cpassword
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
gpp-decrypt
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
GetUserSPNs
Hack The Box - Active
This machine was fairly straight forward and mimicked something youâd unfortunately expect to see even today in a typical penetration test. All in all itâs a...
Node.js
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
GraphQL
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
HelpDeskZ
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
GCC
Hack The Box - Help
Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...
Xxd
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Bzip
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
Pspy
Hack The Box - Curling
This machine had some CTF elements to it, but overall wasnât that difficult to complete through proper enumeration. It highlights some issues which may be pr...
BGP
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
SNMP
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Injection
Hack The Box - Carrier
This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldnât typica...
Zabbix
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Jsonrpc
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Perl
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1505.003 - Web Shell
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1190 - Exploit Public-Facing Application
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1095 - Non-Application Layer Protocol
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1222 - File and Directory Permissions Modification
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
T1222.002 - Linux and Mac File and Directory Permissions Modification
Hack The Box - Zipper
This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...
Burpsuite
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
LFI
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Webapp
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Tac
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
Getcap
Hack The Box - Waldo
This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...
PKI
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Masscan
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Crackmapexec
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Puttygen
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Doas
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
SSH-Keygen
Hack The Box - Ypuffy
This machine was quite interesting, and contained a privilege escalation method Iâd not seen mentioned elsewhere. Luckily this was confined to the challenge,...
Steghide
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
TTY
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Chmod
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Stego
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
IRC
Hack The Box - Irked
This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...
Vim
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
SQLite3
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
DB
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
DeBruijn
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Trufflehog
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Bloodhound
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
EvtxDump
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Sed
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
DDE
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Http2
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
SSL
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Pcap
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Sniffing
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Gdb
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
DNS
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Reversing
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
Cryptography
đ đ SANS 2018 Holiday Hack Challenge (HHC) - KringleCon
Every year the SANS Institute and the Counter Hack Team hosts a âHoliday Hack Challengeâ also commonly referred to as HHC. In January 2019, I successfully co...
PlaintextPasswords
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
PRTG
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
Config
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
Grep
Hack The Box - Netmon
Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...
SAM
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
PWDump
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
mRemoteNG
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Guestmount
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
SCP
Hack The Box - Bastion
Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...
Windows
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Impacket
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Mssqlclient
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Macro
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Olevba
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Responder
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Powersploit
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1505.001 - SQL Stored Procedures
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1059.003 - Windows Command Shell
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1059.001 - PowerShell
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1059 - Command and Scripting Interpreter
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1059.006 - Python
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1552.006 - Group Policy Preferences
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
T1552 - Unsecured Credentials
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
Psexec
Hack The Box - Querier
Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...
DEFCON
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
FTK Imager
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Autopsy
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Live Response
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Volatility
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
Deadbox
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
HexEdit
2019 Defcon DFIR CTF Write-up
The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...
T1546.015 - Component Object Model Hijacking
MITRE ATT&CK⢠Analysis - T1546.015 Component Object Model Hijacking
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1197 - BITS Jobs
MITRE ATT&CK⢠Analysis - T1197 BITS Jobs
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1546.008 - Accessibility Features
MITRE ATT&CK⢠Analysis - T1546.008 Accessibility Features
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1055 - Process Injection
MITRE ATT&CK⢠Analysis - T1055 Process Injection
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1546.010 - AppInit DLLs)
MITRE ATT&CK⢠Analysis - T1546.010 AppInit DLLs
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1127 - Trusted Developer Utilities Proxy Execution
MITRE ATT&CK⢠Analysis - T1127.001 MSBuild
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1127.001 - MSBuild
MITRE ATT&CK⢠Analysis - T1127.001 MSBuild
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1027 - Obfuscated Files or Information
MITRE ATT&CK⢠Analysis - T1027.004 Compile After Delivery
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1027.004 - Compile After Delivery
MITRE ATT&CK⢠Analysis - T1027.004 Compile After Delivery
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1091 - Replication Through Removable Media
MITRE ATT&CK⢠Analysis - T1091 Replication Through Removable Media
Various tests involving methods outlined within the MITRE ATT&CK framework.
System Binary Proxy Execution - T1218
MITRE ATT&CK⢠Analysis - T1218.004 InstallUtil
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1218.004 - InstallUtil
MITRE ATT&CK⢠Analysis - T1218.004 InstallUtil
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1546.001 - Change Default File Association)
MITRE ATT&CK⢠Analysis - T1546.001 Change Default File Association
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1548 - Abuse Elevation Control Mechanism
MITRE ATT&CK⢠Analysis - T1548.002 - Bypass User Account Control
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1548.002 - Bypass User Account Control
MITRE ATT&CK⢠Analysis - T1548.002 - Bypass User Account Control
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1546.012 - Image File Execution Options Injection
MITRE ATT&CK⢠Analysis - T1546.012 Image File Execution Options Injection
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1218.003 - CMSTP
MITRE ATT&CK⢠Analysis - T1218.003 CMSTP
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1550 - Use Alternate Authentication Material
MITRE ATT&CK⢠Analysis - T1550.002 Pass the Hash
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1550.002 - Pass the Hash
MITRE ATT&CK⢠Analysis - T1550.002 Pass the Hash
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1557 - Adversary-in-the-Middle
MITRE ATT&CK⢠Analysis - T1557.001 LLMNR/NBT-NS Poisoning and SMB Relay
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1557.001 - LLMNR/NBT-NS Poisoning and SMB Relay
MITRE ATT&CK⢠Analysis - T1557.001 LLMNR/NBT-NS Poisoning and SMB Relay
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1218.002 - Control Panel
MITRE ATT&CK⢠Analysis - T1218.002 Control Panel
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1218.005 - Mshta
MITRE ATT&CK⢠Analysis - T1218.005 Mshta
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1021 - Boot or Logon Initialization Scripts
MITRE ATT&CK⢠Analysis - T1037.001 Logon Script (Windows)
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1037.001 - Logon Script (Windows)
MITRE ATT&CK⢠Analysis - T1037.001 Logon Script (Windows)
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1021 - Remote Services
MITRE ATT&CK⢠Analysis - T1021.006 Windows Remote Management
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1021.006 - Windows Remote Management
MITRE ATT&CK⢠Analysis - T1021.006 Windows Remote Management
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1053 - Scheduled Task/Job
MITRE ATT&CK⢠Analysis - T1053.005 Scheduled Task
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1053.005 - Scheduled Task
MITRE ATT&CK⢠Analysis - T1053.005 Scheduled Task
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1074 - Data Staged
MITRE ATT&CK⢠Analysis - T1074.001 Local Data Staging
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1074.001 - Local Data Staging
MITRE ATT&CK⢠Analysis - T1074.001 Local Data Staging
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1087 - Account Discovery
MITRE ATT&CK⢠Analysis - T1087 Account Discovery
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1113 - Screen Capture
MITRE ATT&CK⢠Analysis - T1113 Screen Capture
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1090 - Proxy
MITRE ATT&CK⢠Analysis - T1090 Proxy
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1556 - Modify Authentication Process
MITRE ATT&CK⢠Analysis - T1556.002 Password Filter DLL
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1556.002 - Password Filter DLL
MITRE ATT&CK⢠Analysis - T1556.002 Password Filter DLL
Various tests involving methods outlined within the MITRE ATT&CK framework.
Input Capture - T1056
MITRE ATT&CK⢠Analysis - T1056.004 Credential API Hooking
Various tests involving methods outlined within the MITRE ATT&CK framework.
T1056.004 - Credential API Hooking
MITRE ATT&CK⢠Analysis - T1056.004 Credential API Hooking
Various tests involving methods outlined within the MITRE ATT&CK framework.
OSCP
OSCP and Penetration Testing
Cyber Security resources for OSCP and penetration testing.
VirusTotal
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Malcode Analyst Pack
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Dependency Walker
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Exeinfo PE
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PE Detective
Practical Malware Analysis - Chapter 1 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
IOCTL Driver
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
DeviceIoControl
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
EPROCESS
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Symbolic Link
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Kernel Debugging
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
COM serial port
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Named Pipe
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Windows Firewall
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
System Service Descriptor Table (SSDT)
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
KiServiceTable
Practical Malware Analysis - Chapter 10 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Graphical Identification and Authentication (GINA)
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Professional PE file Explorer - PPEE (Puppy)
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
AppInit_DLLs
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
SMTP Daemon
Practical Malware Analysis - Chapter 11 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Fakenet
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
010 Editor
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
FindCrypt2
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Krypto ANALyzer (KANAL)
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
IDA-Ent
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
FindCrypt-Ghidra
Practical Malware Analysis - Chapter 13 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
WhatIsMyBrowser
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PfSSense
Practical Malware Analysis - Chapter 14 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Anti-Disassembly
Practical Malware Analysis - Chapter 15 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Anti-Debugging
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
ScyllaHide
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
TitanHide
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
HideDebug
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Thread Local Storage
Practical Malware Analysis - Chapter 16 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Anti-Virtual Machine
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
ScoopyNG
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
VmwareHardenedLoader
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
SIDT - Red Pill Technique
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
STR
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
SLDT - No Pill Technique
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
SGDT
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
SMSW
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
IN
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
CPUID
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Maclookup
Practical Malware Analysis - Chapter 17 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Original Entry Point (OEP)
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
OllyDump
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PEiD Generic Unpacker
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Snaker's Generic Unpacker
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
ImpREC
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
POPAD
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PUSHAD
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
POPFD
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PUSHFD
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
ASPack
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
UPack
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PE Explorer
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Upack Unpacker
Practical Malware Analysis - Chapter 18 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Shellcode_launcher
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Blob Runner
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Position-Independent Code (PIC)
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
NOP Sled/Slide
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
LODSB
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
STOSB
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
PDFStreamDumper
Practical Malware Analysis - Chapter 19 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Virtual Machine
Practical Malware Analysis - Chapter 2 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Vtables
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Overloading and Mangling
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Inheritance and Function Overriding
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Virtual and Non-Virtual Functions
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
XAMPP
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
FileZilla
Practical Malware Analysis - Chapter 20 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Leaf and Nonlead Functions
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Prologue and Epilogue Code
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
WOW64 Subsystem
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Processs Monitor (Procmon)
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Cutter
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
x64Dbg
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
x32Dbg
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Pesstudio
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
BinDiff
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
HashMyFiles
Practical Malware Analysis - Chapter 21 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Regshot
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
FakeNet
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Process Hollowing
Practical Malware Analysis - Chapter 3 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Abstraction
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Memory
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Assembly Instructions
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
x86 Opcodes
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Operands
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Registers
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
x86 Logical Operators
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Stack
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Conditionals
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Branching
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Buffers
Practical Malware Analysis - Chapter 4 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
C
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Variables
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Arithmetic
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
cdecl
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
fastcall
Practical Malware Analysis - Chapter 6 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Binary Patching
Practical Malware Analysis - Chapter 9 Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
YarGen
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
MalQuery
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
Hybrid Analysis
Practical Malware Analysis - Conclusion Lab Write-up
This details reverse engineering activities and answers for labs contained in the book âPractical Malware Analysisâ by Michael Sikorski and Andrew Honig, whi...
STRRAT
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Strigoi
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Sigma
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Crimson Shadow
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
GoAccess
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Java Decompiler (JD-GUI)
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
JavaScript
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
CarLambo
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Allatori Java Obfuscator
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
PBKDF2
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
AES
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Urlscan
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
OSINT
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
RAT
STRRAT (Strigoi) - Malware Analysis Lab
Analysis of the malware STRRAT.
Redline Stealer
Redline Stealer - Malware Analysis Lab
Analysis of the malware Redline Stealer.
Miscellaneous
Nuggets of Knowledge
Place to capture random social media posts which Iâve made, and capture various pieces of shared knowledge which proved popular.
Nuggets of Knowledge
Place to capture random social media posts which Iâve made, and capture various pieces of shared knowledge which proved popular.
Aspmuma
Aspmuma 2009 âxxooxxâ - Malware Analysis Lab
Analysis of a web shell Iâve named Aspmuma 2009 âxxooxxâ.
Webshell
Aspmuma 2009 âxxooxxâ - Malware Analysis Lab
Analysis of a web shell Iâve named Aspmuma 2009 âxxooxxâ.
ASPX
Aspmuma 2009 âxxooxxâ - Malware Analysis Lab
Analysis of a web shell Iâve named Aspmuma 2009 âxxooxxâ.
Remcos
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
RC4
Remcos RAT - Malware Analysis Lab
Analysis of Remcos RAT, a prevalent remote access tool/trojan.
Game Hacking
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Pwn Adventure
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Pwnie Island
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Windbg
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Cheat Engine
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Key Generation
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Integer Overflow
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Integer Underflow
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Race Condition
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Memory Analysis
Pwn Adventure 3 - Pwnie Island
Hacking âPwn Adventure 3: Pwnie Islandâ, an intentionally vulnerable first-person MMORPG.
Cobalt Strike Stager
Cobalt Strike Stager - Malware Analysis Lab
Analysis of a Cobalt Strike Stager using CyberChef and then supporting findings with specific Python scripts
Cyberchef
Cobalt Strike Stager - Malware Analysis Lab
Analysis of a Cobalt Strike Stager using CyberChef and then supporting findings with specific Python scripts
Snake Keylogger
Snake Keylogger - Malware Analysis Lab
Analysis of the Snake Keylogger and how it steals information from your system
Android Malware
Android Malware - Malware Analysis Lab
Analysis of an Android application which proxies requests and sends specific URLs accessed to remote advertising servers
JADX
Android Malware - Malware Analysis Lab
Analysis of an Android application which proxies requests and sends specific URLs accessed to remote advertising servers
Spyware
Android Malware - Malware Analysis Lab
Analysis of an Android application which proxies requests and sends specific URLs accessed to remote advertising servers
PowerShell Webhook Clipper
PowerShell Webhook Clipper - Malware Analysis Lab
Analysis of a PowerShell script which takes the contents of your clipboard and exfiltrates it to a webhook any time you use CTRL + C
Clipper
PowerShell Webhook Clipper - Malware Analysis Lab
Analysis of a PowerShell script which takes the contents of your clipboard and exfiltrates it to a webhook any time you use CTRL + C
AgentTesla
Agent Tesla - Malware Analysis Lab
Analysis of a UPX packed AutoIT binary which injects an Agent Tesla payload into memory, combined with some brief analysis of the Agent Tesla payload itself.
SFX
BlackNET RAT - Malware Analysis Lab
Deep dive analysis of the BlackNET RAT malware which recruits your system into a botnet that can be controlled from a centralised PHP web interface.
Havoc
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Demon
Havoc Demon Hunting - Malware Analysis Lab
Analysis of a Havoc Demon and how YARA rules can be created with Ghidra to find other samples
Xworm Loader
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Steganography
Xworm Loader - Malware Analysis Lab
Analysis of an Xworm Loader which invokes a PowerShell script that retrieves a payload from the end of a picture
Duvet Stealer
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
BBY Stealer
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
VSCode
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
Electron
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
NodeJS
Duvet Stealer - Malware Analysis Lab
Analysis of Duvet Stealer, Electron-based malware designed to target Discord users
Fakebat Malware
Fakebat Malware - Malware Analysis Lab
Analysis of Fakebat Malware a malware-as-a-service downloader
MSIX
Fakebat Malware - Malware Analysis Lab
Analysis of Fakebat Malware a malware-as-a-service downloader
IDAT Loader
IDAT Loader - Malware Analysis Lab
Analysis of IDAT Loader RAT, an advanced malware-as-a-service injector
AsyncRAT Injector
AsyncRAT Injector - Malware Analysis Lab
Analysis of an AsyncRAT downloader, reflective loader, injector, and perfoming AES decryption using CyberChef
TURS Agent
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
Cryptoshuffler
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
.JAR
Cryptoshuffler/TURS Agent - Malware Analysis Lab
Analysis of a backoored Wasabi Wallet installer and how it deploys TURS Agent onto a system
AMOS
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
Atomic MacOS Stealer
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
Mac-O
Atomic MacOS Stealer (AMOS) - Malware Analysis Lab
Analysis of Atomic MacOS Stealer (AMOS) distributed through fake Homebrew domains
Formbook Downloader
FormBook Downloader - Malware Analysis Lab
Analysis of a LNK which acts as a FormBook download cradle hosted on a compromised WordPress website.
LECmd
FormBook Downloader - Malware Analysis Lab
Analysis of a LNK which acts as a FormBook download cradle hosted on a compromised WordPress website.
LNK
FormBook Downloader - Malware Analysis Lab
Analysis of a LNK which acts as a FormBook download cradle hosted on a compromised WordPress website.
PE-Bear
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
Scylla
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
x64dbg
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
x32dbg
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
API Monitor
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
FakeNet-NG
LummaC2 - Malware Analysis Lab
Analysis of a RAR file which leads to the discovery of malicious Github repositories designed to distribute malware.
ClearFake
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
Fake Browser Update
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
pestudio
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
FLOSS
ClearFake - Malware Analysis Lab
Analysis of ClearFake malware which is planted on compromised WordPress websites to convince unsuspecting visitors to download and run malware.
Incident
Digital Forensics and Incident Response
Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.
Response
Digital Forensics and Incident Response
Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.
IR
Digital Forensics and Incident Response
Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.