Security Writeups
CTF writeups, machine walkthroughs, and security challenge solutions.
All Writeups
28 availableVulnNet: dotpy
Scanned target with nmap
Enumerated Python web application
VulnNet: Roasted
AD enumeration
Identified ASREPRoastable accounts
VulnNet: Node
Nmap scan revealed Node.js application
Enumerated API endpoints
VulnNet: Internal
Network enumeration
Identified internal services
VulnNet: Active
AD enumeration with BloodHound
Identified Kerberoastable accounts
Sustah
Initial enumeration
Discovered web application
Reset
Nmap scan revealed services
Enumerated web server
RazorBlack
Scanned target with nmap
Enumerated web application
Operation Endgame
Comprehensive enumeration
Identified multiple attack vectors
One Piece
Nmap scan revealed services
Enumerated web application
Message to Garcia
Scanned target with nmap
Enumerated services
Lumberjack Turtle
Nmap scan revealed open ports
Enumerated web server
Ledger
Initial nmap scan
Enumerated web application
Jack
Scanned target with nmap
Enumerated running services
IronShade
Nmap scan revealed services
Enumerated web server
Inferno
Scanned target with nmap
Enumerated web application
Hopper Origins
Initial enumeration with nmap
Discovered web application
Exfilibur
Nmap scan revealed web services
Enumerated application for data exfiltration vectors
Enterprise
Performed comprehensive AD enumeration
Identified misconfigurations in Group Policy
Eavesdropper
Scanned target with nmap
Enumerated web server and found exposed files
Devie
Initial enumeration with nmap
Discovered web application with development endpoints
Debug
Nmap scan revealed multiple services
Enumerated web application for debugging endpoints
CupidCards
Scanned target with nmap
Enumerated web application endpoints
Chains of Love
Enumerated web application for SSRF vulnerabilities
Discovered internal services through SSRF
Brute
Scanned target with nmap
Enumerated web application for input vectors
Biblioteca
Performed nmap scan to identify web server
Discovered hidden directory through manual enumeration
Attacktive Directory
Enumerated AD environment using BloodHound
Identified Kerberoastable service accounts
Annie
Ran nmap scan to discover open ports (SSH, HTTP)
Enumerated web directory and found WordPress installation