Saihat's Network Security Blog

Introduction Today we're going to be doing a walkthrough for the Brainstorm room hosted at https://tryhackme.com/room/ brainstorm . For this walkthrough, we'll be using two virtual machines (VMs), a Kali Linux VM as our attacking machine, and the deployed Windows Brainstorm client as the the victim machine. Task 1 - Deploy Machine and Scan Network Questions: Deploy the machine No answer needed How many ports are open? First, we're going to add the IP address of the Brainstorm machine to our attacking machine's / etc/hosts file. In the current version of Kali,we need switch to Root before doing so: As Root: echo “10.10.100.56 brainstorm.thm” >> /etc/hosts At the time of our examination of the network, there were a number of machines live in the network, and the number of open ports on those systems does not match the answer for this question. Neither does the number of open ports on the brainstorm.thm machine. In the end, we brute forced the answer. Task 2 - A...

Introduction Today we're going to be doing a CTF challenge walkthrough of the Emdee Five for Life challenge hosted at https://app.hackthebox.eu/challenges/67 . Emdee five for life is a cryptography and scripting challenge. For this walkthrough, we'll be using a Kali Linux virtual machine as our attacking system. After starting the challenge instance, we find that the associated URL is http://139.59.178.146:30204/ . The challenge's description is as follows: CHALLENGE DESCRIPTION Can you encrypt fast enough? Initial Enumeration From the challenge name and description, we can guess that MD5 encryption will play a part in completing the challenge. Let's visit the challenge URL : http://139.59.178.146:30204/  We can copy the string, then use the MD5sum command to return a MD5 -encrypted version of the string: echo -n "dc4YGQyrs6q9BsIAituO" | md5sum Then we copy the output of the command and submit it to the web form, which results in this: We kn...