t3chnocat.com

We all know what happens when you leave edge software unpatched.

Designing identity systems that keep pace with AI-driven development Thesis: Identity systems designed for human-paced development are failing in AI-accelerated environments.

Cache was a medium rated Linux box where enumerating a website found some hard-coded creds and a vhost that contained an Electronic Medical Records application.

Admirer was an easy rated Linux machine that had a lot more steps than I expected, given the rating.

Quick was a hard rated Linux box and man, did it earn that rating.

Magic was a medium rated Linux box that required you to find a hidden upload function then bypass its upload restrictions to execute code and catch a shell as www-data.

Traceback was an easy rated Linux machine that required finding a webshell on an already pwned website, using it to upload a php reverse shell, then catching a shell as webadmin.

Cascade was a medium rated Windows machine where a legacy password found in LDAP enabled access to SMB shares.

Sauna was an easy rated Windows box with a focus on Active Directory.

Book was a very interesting medium rated Linux machine that introduced me to some new techniques.

ForwardSlash was a hard rated Linux box where a LFI vulnerability on a file upload function found on a vhost was exploited with PHP wrappers to find creds that worked for SSH.

PlayerTwo was an insane rated Linux box that was a hell of a journey.

ServMon was an easy rated Windows box that took me longer to solve than I expected given the rating.

Monteverde was a medium difficulty Windows box in which lazy password practice combined with password spraying allowed access to a SMB share.

Resolute was a medium rated Windows machine in which LDAP was queried for a list of users and an initial account password.