CHALLENGE DESCRIPTION It is Friday afternoon and the SOC at Edny Consulting Ltd has received alerts from the workstation of Jason Longfield, a software engineer on the development team, regarding t...

CHALLENGE DESCRIPTION Being in the ICS Industry, your security team always needs to be up to date and should be aware of the threats targeting organizations in your industry. You just started as a ...

Writeup User flag Discover open ports nmap -sC -sV 10.129.69.208 PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | ...

Machine Information As is common in real life pentests, you will start the Planning box with credentials for the following account: admin / 0D5oT70Fq13EvB5r Writeup User Flag First, we need to se...

CHALLENGE DESCRIPTION Your security team must always be up-to-date and aware of the threats targeting organizations in your industry. As you begin your journey as a Threat Intelligence Intern, equi...

CHALLENGE DESCRIPTION In this Sherlock, players will be introduced to the MITRE ATT&CK framework, which is a comprehensive tool used to research and understand advanced persistent threat (APT) ...

CHALLENGE DESCRIPTION SOLUTION psql -h saturn.picoctf.net -p 55291 -U postgres pico #to connect to server. {Back splash} l #to show all databases {Back splash} dt #to show all tables select * ...

CHALLENGE DESCRIPTION SOLUTION From hint, we know that we need to use XML payload to done this challenge. Click on any Detail button of the post, we will see XML code below, inject payload and we...

CHALLENGE DESCRIPTION SOLUTION We can see the SQLite from the hint, try to login, and we see this. We need to add comment at password to bypass the username using ' or 1=1 --

CHALLENGE DESCRIPTION SOLUTION Analyze the files they gave us, and look into the server.js We can see that they use MongoDB and Json, search it and we have the payload for nosql.