Tag: writeup

Write-up: Hack The Box – Rope Two

HomeSen
HomeSen
HomeSen
Latest posts by HomeSen (see all)

The machine Rope2 by r4j is probably (one of) the hardest boxes on HackTheBox.eu with only 104 system owns after 202 days. The theme of the box is more or less “research”, since it requires (gaining) knowledge in many different fields: Browser Exploitation, esoteric Heap Feng-Shui, and finally Linux Kernel Exploitation. For me, all 3 fields were pretty new and thus I had a lot to learn (over the course of almost exactly 3 months).

Continue reading “Write-up: Hack The Box – Rope Two”

Write-up: Hackvent 2019

HomeSen
HomeSen
HomeSen
Latest posts by HomeSen (see all)

Like the past few years, the HackingLab Team provided the white-hat hacking competition Hackvent in the form of a advent calendar. From December 1st to 24th , each day, a new challenge was released that has to be solved in-time for scoring full points. Like the past years, challenges were provided from various community members.

Continue reading “Write-up: Hackvent 2019”

ARM-X Challenge: Breaking the webs

HomeSen
HomeSen
HomeSen
Latest posts by HomeSen (see all)

At the beginning of November, @therealsaumil announced “a brand new IP camera CTF challenge” on Twitter:

Continue reading “ARM-X Challenge: Breaking the webs”

Write-up: Flare-On 6

HomeSen
HomeSen
HomeSen
Latest posts by HomeSen (see all)

From August 16 to September 27, FireEye’s FLARE team ran the Flare-On challenge for the 6th straight year (see announcement, here). This CTF-style challenge is comprised of 12 reverse-engineering tasks for different architectures. Like the past years, it was a great event with so much new things learned.
TL;DR: I started a tad bit late, but managed to solve 11 out of those 12 challenges (after solving “vv_max”, I had 4 hours left to break the last challenge – a malicious Windows driver – which was way too little time 😉

Continue reading “Write-up: Flare-On 6”

Write-up: DVAR ROP Challenge

HomeSen
HomeSen
HomeSen
Latest posts by HomeSen (see all)

Not long after I took the „ARM IoT Exploit Laboratory“ training by @therealsaumil, the following tweet popped up on my timeline:

Continue reading “Write-up: DVAR ROP Challenge”

Writeup: KringleCon 2018

HomeSen
HomeSen
HomeSen
Latest posts by HomeSen (see all)

The annual Holiday Hack Challenge by SANS and the Counterhack team takes place during Christmas time and is always entertaining and great for learning a new trick (or two). This year, the challenge was organized as an online conference, called KringleCon: https://holidayhackchallenge.com/2018/ with great talks and a well thought-out story.

Continue reading “Writeup: KringleCon 2018”