https://blog.ikuamike.io/index.xml

Introduction This weekend I had some fun participating in the P3RF3CTR00T CTF 2024 by p3rf3ctr00t ctf team.

Introduction This weekend I had some fun participating in the P3RF3CTR00T CTF 2024 by p3rf3ctr00t ctf team, barely got some sleep.

Introduction Following my previous writeup that I did for Misc challenges in the NahamCon CTF, I decided to play the challenges in the Mobile category.

Introduction NahamCon 2024 is taking place this weekend and they had a CTF as part of the online conference.

Introduction After a long while since I participated in a CTF, I had the pleasure to participate in HTB Business CTF 2024 these past few days.

Introduction In this post, I’ll be covering solutions to the Misc Challenges from the HTB Business CTF 2024 . 1.

Introduction After passing my OSCP, I am planning on doing CRTP and CRTO sometime this year.

Introduction Similar to last year’s ctf we are provided with a kali machine as the jump box and an Ubuntu VM with ports open for the different challenges.

Introduction @SheHacksKE held their yearly hackfest event in October 2021 but it was online this year.

Introduction Last week @mystic_kev and I participated in the AfricaHackon 2021 CTF finals as team NoPwnNoGain, we managed position 4.

Introduction H@cktivityCon 2021 was happening over the weekend and I participated in their ctf with team @fr334aks .

Introduction Package managers are run with root permissions on linux distributions to install, update or remove software/packages.

Introduction Netcat is a tool that reads and writes data across network connections, using TCP or UDP protocol.

Difficulty Release Date Author Beginner 15 Feb 2020 Love Summary In this box there’s only one port open that is running a vulnerable version of sar2html that we take advantage of to get a low priv shell.

Difficulty Release Date Author Beginner 24 Sep 2019 FalconSpy Summary For this box, initial access was a web shell discovered.

Difficulty Release Date Author Beginner 26 Apr 2020 James Hay Summary For this box we only get one port running a web server and we discover wordpress and phpmyadmin by directory bruteforcing.

Difficulty Release Date Author Intermediate 29 Jul 2020 v1n1v131r4 Summary For this box, we perform directory bruteforce on the webserver to discover a vulnerable version of openemr.

Difficulty Release Date Author Beginner 2 Nov 2019 Ic0de Summary This was an easy box, initial foothold was on wordpress.

Difficulty Release Date Author Beginner 2 Mar 2020 Zayotic Summary In this box, we first perform ldap injection on the web application to bypass the login page.

Difficulty Release Date Author Intermediate 20 Aug 2019 Zayotic Summary For this box, some directory bruteforce is needed to discover some php files.

Difficulty Release Date Author Intermediate 7 Apr 2020 Zayotic Summary In this box, we need to perform some directory bruteforce then use shellshock vulnerability to get our first shell.

Difficulty Release Date Author Intermediate 18 July 2019 Zayotic Summary This box had quite a good number of misconfigurations and vulnerabilities.

Difficulty Release Date Author Beginner 29 June 2019 Zayotic Summary I got an OSCP voucher last year and this is my active effort to prep for it using TJ-Null’s OSCP Prep list.

Summary Over the weekend I participated in Metasploit Community December CTF by Rapid7 with team fr334aks .

Summary During Grayhat Conference the Red Team Village hosted a beginner/intermediate CTF.

Summary I recently participated in RaziCTF 2020 with team fr344aks and I was able to solve an android challenge that I thought needs a proper writeup.

I recently worked on a CTF challenge by CyberSpace Kenya which I ended up winning.

Summary As the name suggests this box had a instance of gitlab where the initial foothold involves getting credentials from obfuscated javascript and once logged into the gitlab instance we abuse webhooks to add our own code and execute it to get a reverse

Summary Bastion was a relatively easy box.