![]() ![]() Hackvent 2023 was a ton of fun, and this year I made it through 22 of the 24 challenges (25 of 27 counting hidden challenge), only running out of time on two of the final three. ![]() The SANS Holiday Hack is something I look forward to each year, and 2023 did not disappoint.Ĭtf hackvent qrcode python flask geek-code grille-cipher ghidra reverse-engineering kdenlive deepskystacker video-noise volatility stegnaography stegsolve transfer-encoding ![]() ![]() In the end, I’ll hack into his space system and redirect his missile away from Earth into the sun. I’ll work through a series of technical (and physical) challenges to find that it’s Jack Frost behind the AI, working from space, trying to destroy Christmas. The 2023 challenge, A Holiday Odyssey, Featuring 6: Geese A-Lei’ing!, takes place in the Geese Islands, where Santa has moved his operation on the advice of his new AI, ChatNPT. From there, I’ll abuse how the Less pager works with systemctl to get shell as root.Ģ023 SANS Holiday Hack Challenge: A Holiday Odyssey | Featuring 6: Geese A-Lei'ing! I’ll find and exploit an SSRF vulnerability in a website, and use it to exploit a command injection in an internal Mailtrack website. Ctf hackthebox htb-sau nmap request-baskets feroxbuster cve-2023-27163 ssrf mailtrail command-injection systemctl less ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |