Posts by Tag : Jai Minton

CTF

🎅🎄 SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5

68 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2022, I successfully c...

🎅🎄 SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4

3 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2021, I successfully c...

🎅🎄 SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2020, I successfully c...

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

🎅🎄 SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2

1 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2019, I successfully c...

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

Technical

🎅🎄 SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5

68 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2022, I successfully c...

🎅🎄 SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4

3 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2021, I successfully c...

🎅🎄 SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2020, I successfully c...

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

🎅🎄 SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2

1 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2019, I successfully c...

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

Malware Analysis

Aspmuma 2009 ‘xxooxx’ - Malware Analysis Lab

6 minute read

Analysis of a web shell I’ve named Aspmuma 2009 ‘xxooxx’.

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Lab Write-up

1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 2 Lab Write-up

less than 1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PMA

Practical Malware Analysis - Lab Write-up

1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 2 Lab Write-up

less than 1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

No Starch Press

Practical Malware Analysis - Lab Write-up

1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 2 Lab Write-up

less than 1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

HTB

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

Static Malware Analysis

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Dynamic Malware Analysis

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Nmap

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

x86 Disassembly

Pwn Adventure 3 - Pwnie Island

91 minute read

Hacking ‘Pwn Adventure 3: Pwnie Island’, an intentionally vulnerable first-person MMORPG.

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

IDA Pro

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PE-bear

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Strings

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

CyberChef

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

PEview

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Process Monitor (Procmon)

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Injector

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

OllyDbg

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Gobuster

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Back to top ↑

Holiday Hack Challenge (HHC)

🎅🎄 SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5

68 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2022, I successfully c...

🎅🎄 SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4

3 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2021, I successfully c...

🎅🎄 SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2020, I successfully c...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

🎅🎄 SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2

1 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2019, I successfully c...

Back to top ↑

Kringlecon

🎅🎄 SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5

68 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2022, I successfully c...

🎅🎄 SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4

3 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2021, I successfully c...

🎅🎄 SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2020, I successfully c...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

🎅🎄 SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2

1 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2019, I successfully c...

Back to top ↑

SANS

🎅🎄 SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5

68 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2022, I successfully c...

🎅🎄 SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4

3 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2021, I successfully c...

🎅🎄 SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2020, I successfully c...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

🎅🎄 SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2

1 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2019, I successfully c...

Back to top ↑

CounterHack

🎅🎄 SANS 2022 Holiday Hack Challenge (HHC) - KringleCon 5

68 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2022, I successfully c...

🎅🎄 SANS 2021 Holiday Hack Challenge (HHC) - KringleCon 4

3 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2021, I successfully c...

🎅🎄 SANS 2020 Holiday Hack Challenge (HHC) - KringleCon 3

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2020, I successfully c...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

🎅🎄 SANS 2019 Holiday Hack Challenge (HHC) - KringleCon 2

1 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In December 2019, I successfully c...

Back to top ↑

T1546 - Event Triggered Execution

MITRE ATT&CK™ Analysis - T1546.012 Image File Execution Options Injection

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

MITRE ATT&CK™ Analysis - T1546.001 Change Default File Association

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

MITRE ATT&CK™ Analysis - T1546.010 AppInit DLLs

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

MITRE ATT&CK™ Analysis - T1546.008 Accessibility Features

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

MITRE ATT&CK™ Analysis - T1546.015 Component Object Model Hijacking

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

Masquerading

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

XOR

Practical Malware Analysis - Chapter 5 Lab Write-up

11 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Pestudio

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

SMB

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

Python

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Back to top ↑

Resource Hacker

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Debugging

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

HxD

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Mutex

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

ApateDNS

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Ghidra

Pwn Adventure 3 - Pwnie Island

91 minute read

Hacking ‘Pwn Adventure 3: Pwnie Island’, an intentionally vulnerable first-person MMORPG.

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Netcat

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Back to top ↑

SSH

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Back to top ↑

FTP

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Smbclient

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Back to top ↑

Curl

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Back to top ↑

Snort

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Forensics

Digital Forensics and Incident Response

123 minute read

Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

T1218 - System Binary Proxy Execution

MITRE ATT&CK™ Analysis - T1218.005 Mshta

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

MITRE ATT&CK™ Analysis - T1218.002 Control Panel

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

MITRE ATT&CK™ Analysis - T1218.003 CMSTP

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

PEiD

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Packing

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

COM Object

Practical Malware Analysis - Chapter 7 Lab Write-up

6 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Breakpoints

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Hooking

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Keylogger

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Credential Stealer

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Rundll32

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Process Explorer (ProcExp)

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 12 Lab Write-up

13 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Fakenet-NG

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Exceptions

Practical Malware Analysis - Chapter 8 Lab Write-up

2 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Structures (Structs)

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Endianness

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

C++

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

MSFVenom

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Back to top ↑

Apache

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Back to top ↑

Git

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Back to top ↑

Java

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Back to top ↑

Readpst

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Metasploit

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Hashcat

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Back to top ↑

Base64

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Back to top ↑

SUID

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

Searchsploit

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1078 - Valid Accounts

MITRE ATT&CK™ Analysis - T1078 Valid Accounts

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1505 - Server Software Component

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

SQL

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Powershell

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Penetration Testing

OSCP and Penetration Testing

12 minute read

Cyber Security resources for OSCP and penetration testing.

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1543.003 - Windows Service

MITRE ATT&CK™ Analysis - T1543.003 Windows Service

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1543 - Create or Modify System Process

MITRE ATT&CK™ Analysis - T1543.003 Windows Service

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

DFIR

Digital Forensics and Incident Response

123 minute read

Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

Cheatsheet

Digital Forensics and Incident Response

123 minute read

Cheatsheet containing a variety of commands and concepts relating to digital forensics and incident response.

OSCP and Penetration Testing

12 minute read

Cyber Security resources for OSCP and penetration testing.

Back to top ↑

UPX

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Rootkit

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

WinDbg

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

stdcall

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Scdbg

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Shellcode

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

CFF Explorer VIII

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Wireshark

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Immunity Debugger

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

ServiceDLL

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Malware

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Analysis

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Practical

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Lab

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Reverse

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Engineering

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Detect-It-Easy (DIE)

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Link List Traversal

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

FLARE VM

Practical Malware Analysis - Lab Write-up

1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Practical Malware Analysis - Chapter 2 Lab Write-up

less than 1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

x64 Disassembly

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Yara

STRRAT (Strigoi) - Malware Analysis Lab

68 minute read

Analysis of the malware STRRAT.

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

.NET

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

Back to top ↑

.NET Decompilation

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

Back to top ↑

Dnspy

Remcos RAT - Malware Analysis Lab

16 minute read

Analysis of Remcos RAT, a prevalent remote access tool/trojan.

Redline Stealer - Malware Analysis Lab

7 minute read

Analysis of the malware Redline Stealer.

Back to top ↑

MS17-010

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

EternalBlue

Hack The Box - Blue

26 minute read

Blue is definitely one of the shortest boxes in Hack The Box history. As the name suggests all that was required to fully compromise this machine was MS17-01...

Back to top ↑

PHPBash

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Back to top ↑

Sudo

Hack The Box - Bashed

3 minute read

Bashed was an extremely simple box demonstrating some of the most basic techniques for spawning reverse shells and elevating privileges. It is a great beginn...

Back to top ↑

Jenkins

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

Groovy

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

Snapshot

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

KeePass

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

PTH

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

RelayHash

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

ADS

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

Pth-winexe

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

JTR

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

John

Hack The Box - Jeeves

5 minute read

Jeeves showed us that an unauthenticated Jenkins server can easily lead to a reverse shell through Groovy Script even if the web-directory is unknown. It hig...

Back to top ↑

Achat

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Back to top ↑

Icacls

Hack The Box - Chatterbox

5 minute read

Chatterbox was a reasonably simple machine which required exploiting a vulnerable ‘Achat’ service with custom shellcode, and then migrating to a more stable ...

Back to top ↑

SMTP

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Back to top ↑

James

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Back to top ↑

Cron

Hack The Box - Solidstate

5 minute read

This machine contained a fairly straightforward SMTP vulnerability which didn’t even need to be exploited to fully compromise the machine. It is an essential...

Back to top ↑

XXE

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Back to top ↑

XML

Hack The Box - Dev0ops

8 minute read

Dev0ops highlighted issues with weakly configured XML parsers which lead to an XXE vulnerability, and developer error which lead to SSH keys in commit revisi...

Back to top ↑

Tomcat

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Back to top ↑

JSP

Hack The Box - Jerry

2 minute read

Jerry would have to be one of the easiest machines I’ve ever compromised on Hack The Box. This involved using legitimate credentials to log onto an Apache To...

Back to top ↑

Msfvenom

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Certutil

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Runas

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Cmdkey

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Mdbtools

Hack The Box - Access

6 minute read

This machine was fairly basic but still provided some useful reminders and tools which can be utilised to export pst file contents on Linux, natively transfe...

Back to top ↑

Enum4linux

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Back to top ↑

Cpassword

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Back to top ↑

gpp-decrypt

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Back to top ↑

GetUserSPNs

Hack The Box - Active

3 minute read

This machine was fairly straight forward and mimicked something you’d unfortunately expect to see even today in a typical penetration test. All in all it’s a...

Back to top ↑

Node.js

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Back to top ↑

GraphQL

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Back to top ↑

HelpDeskZ

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Back to top ↑

GCC

Hack The Box - Help

5 minute read

Help was an interesting machine which appeared to have multiple ways of gaining access and elevating privileges. In the end it contained elements of graphql,...

Back to top ↑

Xxd

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Back to top ↑

Bzip

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Back to top ↑

Pspy

Hack The Box - Curling

3 minute read

This machine had some CTF elements to it, but overall wasn’t that difficult to complete through proper enumeration. It highlights some issues which may be pr...

Back to top ↑

BGP

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Back to top ↑

SNMP

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Back to top ↑

Injection

Hack The Box - Carrier

9 minute read

This machine had some interesting elements to it and really made you think outside of the box. It incorporated a number of elements which you wouldn’t typica...

Back to top ↑

Zabbix

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

Jsonrpc

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

Perl

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1505.003 - Web Shell

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1190 - Exploit Public-Facing Application

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1095 - Non-Application Layer Protocol

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1222 - File and Directory Permissions Modification

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

T1222.002 - Linux and Mac File and Directory Permissions Modification

Hack The Box - Zipper

8 minute read

This machine took a bit of thinking outside of the box so it was a bit of a nice challenge and involved exploiting both custom binaries and legitimate servic...

Back to top ↑

Burpsuite

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Back to top ↑

LFI

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Back to top ↑

Webapp

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Back to top ↑

Tac

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Back to top ↑

Getcap

Hack The Box - Waldo

5 minute read

This machine was interesting, starting with directory traversal and LFI vulnerabilities, it then exploits a feature not commonly known which is supposed to b...

Back to top ↑

PKI

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Back to top ↑

Masscan

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Back to top ↑

Crackmapexec

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Back to top ↑

Puttygen

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Back to top ↑

Doas

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Back to top ↑

SSH-Keygen

Hack The Box - Ypuffy

5 minute read

This machine was quite interesting, and contained a privilege escalation method I’d not seen mentioned elsewhere. Luckily this was confined to the challenge,...

Back to top ↑

Steghide

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Back to top ↑

TTY

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Back to top ↑

Chmod

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Back to top ↑

Stego

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Back to top ↑

IRC

Hack The Box - Irked

6 minute read

This machine highlighted a few issues such as supply chain compromise, the ease of hiding information using steganography, and how easily a vulnerable binary...

Back to top ↑

Vim

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

SQLite3

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

DB

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

DeBruijn

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Trufflehog

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Bloodhound

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

EvtxDump

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Sed

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

DDE

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Http2

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

SSL

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Pcap

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Sniffing

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Gdb

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

DNS

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Reversing

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

Cryptography

🎅🎄 SANS 2018 Holiday Hack Challenge (HHC) - KringleCon

2 minute read

Every year the SANS Institute and the Counter Hack Team hosts a ‘Holiday Hack Challenge’ also commonly referred to as HHC. In January 2019, I successfully co...

Back to top ↑

PlaintextPasswords

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Back to top ↑

PRTG

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Back to top ↑

Config

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Back to top ↑

Grep

Hack The Box - Netmon

6 minute read

Netmon was a very simple box which highlighted issues with open FTP servers, plaintext configuration files, common password conventions, and blindly trusting...

Back to top ↑

SAM

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Back to top ↑

PWDump

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Back to top ↑

mRemoteNG

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Back to top ↑

Guestmount

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Back to top ↑

SCP

Hack The Box - Bastion

8 minute read

Bastion was a relatively simple machine with the biggest issue steming from maintaining a connection to a remote mounted drive. Utilising a machine vhd backu...

Back to top ↑

Windows

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Impacket

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Mssqlclient

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Macro

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Olevba

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Responder

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Powersploit

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1505.001 - SQL Stored Procedures

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1059.003 - Windows Command Shell

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1059.001 - PowerShell

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1059 - Command and Scripting Interpreter

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1059.006 - Python

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1552.006 - Group Policy Preferences

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

T1552 - Unsecured Credentials

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

Psexec

Hack The Box - Querier

9 minute read

Querier is true to its name, requiring exploitation of common SQL vulnerabilities whilst combining elements of combing through macros, insecure SMB shares, h...

Back to top ↑

DEFCON

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

FTK Imager

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

Autopsy

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

Live Response

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

Volatility

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

Deadbox

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

HexEdit

2019 Defcon DFIR CTF Write-up

33 minute read

The Unofficial Defcon DFIR CTF comprised of 5 different challenge categories with a total of 82 DFIR related challenges including a Crypto Challenge, Deadbox...

Back to top ↑

T1546.015 - Component Object Model Hijacking

MITRE ATT&CK™ Analysis - T1546.015 Component Object Model Hijacking

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1197 - BITS Jobs

MITRE ATT&CK™ Analysis - T1197 BITS Jobs

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1546.008 - Accessibility Features

MITRE ATT&CK™ Analysis - T1546.008 Accessibility Features

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1055 - Process Injection

MITRE ATT&CK™ Analysis - T1055 Process Injection

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1546.010 - AppInit DLLs)

MITRE ATT&CK™ Analysis - T1546.010 AppInit DLLs

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1127 - Trusted Developer Utilities Proxy Execution

MITRE ATT&CK™ Analysis - T1127.001 MSBuild

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1127.001 - MSBuild

MITRE ATT&CK™ Analysis - T1127.001 MSBuild

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1027 - Obfuscated Files or Information

MITRE ATT&CK™ Analysis - T1027.004 Compile After Delivery

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1027.004 - Compile After Delivery

MITRE ATT&CK™ Analysis - T1027.004 Compile After Delivery

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1091 - Replication Through Removable Media

MITRE ATT&CK™ Analysis - T1091 Replication Through Removable Media

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

System Binary Proxy Execution - T1218

MITRE ATT&CK™ Analysis - T1218.004 InstallUtil

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1218.004 - InstallUtil

MITRE ATT&CK™ Analysis - T1218.004 InstallUtil

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1546.001 - Change Default File Association)

MITRE ATT&CK™ Analysis - T1546.001 Change Default File Association

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1548 - Abuse Elevation Control Mechanism

MITRE ATT&CK™ Analysis - T1548.002 - Bypass User Account Control

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1548.002 - Bypass User Account Control

MITRE ATT&CK™ Analysis - T1548.002 - Bypass User Account Control

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1546.012 - Image File Execution Options Injection

MITRE ATT&CK™ Analysis - T1546.012 Image File Execution Options Injection

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1218.003 - CMSTP

MITRE ATT&CK™ Analysis - T1218.003 CMSTP

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1550 - Use Alternate Authentication Material

MITRE ATT&CK™ Analysis - T1550.002 Pass the Hash

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1550.002 - Pass the Hash

MITRE ATT&CK™ Analysis - T1550.002 Pass the Hash

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1557 - Adversary-in-the-Middle

MITRE ATT&CK™ Analysis - T1557.001 LLMNR/NBT-NS Poisoning and SMB Relay

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1557.001 - LLMNR/NBT-NS Poisoning and SMB Relay

MITRE ATT&CK™ Analysis - T1557.001 LLMNR/NBT-NS Poisoning and SMB Relay

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1218.002 - Control Panel

MITRE ATT&CK™ Analysis - T1218.002 Control Panel

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1218.005 - Mshta

MITRE ATT&CK™ Analysis - T1218.005 Mshta

less than 1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1021 - Boot or Logon Initialization Scripts

MITRE ATT&CK™ Analysis - T1037.001 Logon Script (Windows)

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1037.001 - Logon Script (Windows)

MITRE ATT&CK™ Analysis - T1037.001 Logon Script (Windows)

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1021 - Remote Services

MITRE ATT&CK™ Analysis - T1021.006 Windows Remote Management

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1021.006 - Windows Remote Management

MITRE ATT&CK™ Analysis - T1021.006 Windows Remote Management

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1053 - Scheduled Task/Job

MITRE ATT&CK™ Analysis - T1053.005 Scheduled Task

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1053.005 - Scheduled Task

MITRE ATT&CK™ Analysis - T1053.005 Scheduled Task

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1074 - Data Staged

MITRE ATT&CK™ Analysis - T1074.001 Local Data Staging

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1074.001 - Local Data Staging

MITRE ATT&CK™ Analysis - T1074.001 Local Data Staging

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1087 - Account Discovery

MITRE ATT&CK™ Analysis - T1087 Account Discovery

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1113 - Screen Capture

MITRE ATT&CK™ Analysis - T1113 Screen Capture

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1090 - Proxy

MITRE ATT&CK™ Analysis - T1090 Proxy

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1556 - Modify Authentication Process

MITRE ATT&CK™ Analysis - T1556.002 Password Filter DLL

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1556.002 - Password Filter DLL

MITRE ATT&CK™ Analysis - T1556.002 Password Filter DLL

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

Input Capture - T1056

MITRE ATT&CK™ Analysis - T1056.004 Credential API Hooking

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

T1056.004 - Credential API Hooking

MITRE ATT&CK™ Analysis - T1056.004 Credential API Hooking

1 minute read

Various tests involving methods outlined within the MITRE ATT&CK framework.

Back to top ↑

OSCP

OSCP and Penetration Testing

12 minute read

Cyber Security resources for OSCP and penetration testing.

Back to top ↑

VirusTotal

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Malcode Analyst Pack

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Dependency Walker

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Exeinfo PE

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PE Detective

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PowerShell

Practical Malware Analysis - Chapter 1 Lab Write-up

8 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

IOCTL Driver

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

DeviceIoControl

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

EPROCESS

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Symbolic Link

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Kernel Debugging

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

COM serial port

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Named Pipe

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Windows Firewall

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Process Hacker

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

System Service Descriptor Table (SSDT)

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

KiServiceTable

Practical Malware Analysis - Chapter 10 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Graphical Identification and Authentication (GINA)

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Professional PE file Explorer - PPEE (Puppy)

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

AppInit_DLLs

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

SMTP Daemon

Practical Malware Analysis - Chapter 11 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Fakenet

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

010 Editor

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

FindCrypt2

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Krypto ANALyzer (KANAL)

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

IDA-Ent

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

FindCrypt-Ghidra

Practical Malware Analysis - Chapter 13 Lab Write-up

24 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

WhatIsMyBrowser

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PfSSense

Practical Malware Analysis - Chapter 14 Lab Write-up

33 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Anti-Disassembly

Practical Malware Analysis - Chapter 15 Lab Write-up

15 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Anti-Debugging

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

ScyllaHide

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

TitanHide

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

HideDebug

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Thread Local Storage

Practical Malware Analysis - Chapter 16 Lab Write-up

23 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Anti-Virtual Machine

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

ScoopyNG

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

VmwareHardenedLoader

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

SIDT - Red Pill Technique

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

STR

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

SLDT - No Pill Technique

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

SGDT

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

SMSW

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

IN

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

CPUID

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Maclookup

Practical Malware Analysis - Chapter 17 Lab Write-up

29 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Original Entry Point (OEP)

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

OllyDump

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PEiD Generic Unpacker

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Snaker's Generic Unpacker

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

ImpREC

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

POPAD

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PUSHAD

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

POPFD

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PUSHFD

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

ASPack

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

UPack

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PE Explorer

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Upack Unpacker

Practical Malware Analysis - Chapter 18 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Shellcode_launcher

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Blob Runner

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Position-Independent Code (PIC)

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

NOP Sled/Slide

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

LODSB

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

STOSB

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

PDFStreamDumper

Practical Malware Analysis - Chapter 19 Lab Write-up

28 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Virtual Machine

Practical Malware Analysis - Chapter 2 Lab Write-up

less than 1 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Vtables

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Overloading and Mangling

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Inheritance and Function Overriding

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Virtual and Non-Virtual Functions

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

XAMPP

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

FileZilla

Practical Malware Analysis - Chapter 20 Lab Write-up

18 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Leaf and Nonlead Functions

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Prologue and Epilogue Code

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

WOW64 Subsystem

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Processs Monitor (Procmon)

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Cutter

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

x64Dbg

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

x32Dbg

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Pesstudio

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

BinDiff

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

HashMyFiles

Practical Malware Analysis - Chapter 21 Lab Write-up

21 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Regshot

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

FakeNet

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Process Hollowing

Practical Malware Analysis - Chapter 3 Lab Write-up

5 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Abstraction

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Memory

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Assembly Instructions

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

x86 Opcodes

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Operands

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Registers

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

x86 Logical Operators

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Stack

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Conditionals

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Branching

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Buffers

Practical Malware Analysis - Chapter 4 Lab Write-up

10 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

C

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Variables

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Arithmetic

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

cdecl

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

fastcall

Practical Malware Analysis - Chapter 6 Lab Write-up

14 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Binary Patching

Practical Malware Analysis - Chapter 9 Lab Write-up

17 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

YarGen

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

MalQuery

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑

Hybrid Analysis

Practical Malware Analysis - Conclusion Lab Write-up

4 minute read

This details reverse engineering activities and answers for labs contained in the book ‘Practical Malware Analysis’ by Michael Sikorski and Andrew Honig, whi...

Back to top ↑