Introducción En el amplio mundo de las redes, la capacidad de analizar y comprender el tráfico de red es fundamental para administradores de sistemas, ingenieros de red y profesionales de seguridad...

1. File download: hiddencipher.zip File Analysis Initial identificacion of binery shows it is a x64-bit linux executable that has been stripped. ❯ file hiddencipher hiddencipher: ELF 64-bit LSB...

1. File download: gatekeeper File Analysis Initial identification of the binary shows it is a standard 64-bit Linux executable. The fact that it is not stripped is helpful, as it likely contain...

Web Recon The application provides a user registration and login system. Once authenticated, users can store private “secrets” in a personal vault. Initial testing confirmed that secrets are save...

Web Recon The application serves as an expense tracking system with user registration and authentication. After logging in, users can add expenses and generate a downloadable CSV report. Vul...

Web Recon The target application is a web portal that includes a user registration and authentication system. After logging in, we identified a search functionality that accepts user-supplied inp...

Web Recon The entry point of the application is a login portal. Information Gathering & Credential Recovery The challenge provides a database file (users.db), suggesting an offline credential...

Web Recon The target application features a standard login interface. Analisis de código fuente Initial testing and source code analysis revealed the server’s Account Lockout Policy: A maximum...

Web Recon The entry point is a standard login portal. Upon inspecting the HTML source code, we discovered hardcoded credentials left in a developer comment: <!-- Email: guest@picoctf.org Passw...

Reconnaissance The challenge provides a remote service accessible via Netcat (nc). Upon connecting, the service prompts for a username and password. Initial manual attempts with common credentials ...