Looks like some old version of pfsense. Default credentials (admin:pfsense) doesn't work. Only http/https ports are opened Nothing interesting so far Certificate date Username is exposed rohit:pfsense works: Version: 2.1.3…
After going back to login page, I tried a few default credentials and one trivial combination worked. We are logged as "Customer" No hints from cyberchef Nothing interesting about technologies…
After going to http site, user is being redirected to: So I decided to try /etc/passwd Host is vulnerable to local file inclusion There are users related to tftp service…
Port 8443 It looks like it is a Unify app vulnerable to Log2j - CVE-2021-44228 If app is facing public network you can check if site is vulnerable by testing…
Initial scan of “Oopsie”:
Initial scan:
Retro is typical blackbox CTF. Initial nmap scan shows 2 open ports:
This box is quite similar to Brainstorm which i did previously. Initial scan shows 2 open tcp ports: 9999 and 10000
The purpose of this CTF is to reverse engineer a chat program and write a script that will exploit a Windows machine. It is a great example of buffer overflow,…
Enumeration – nmap
Marceli