https://d3bo.eu/en/tags/ctf/Recent content in CTF on d3boHugo -- gohugo.ioenCopyright (c) 2025 HyasMon, 18 Mar 2024 00:00:00 +0000https://d3bo.eu/en/ctf/pico/bufferoverflow-1/Sat, 10 Feb 2024 12:16:22 +0100https://d3bo.eu/en/ctf/pico/bufferoverflow-1/Material / Information Domain: saturn.picoctf.net Port: 63667 (may vary) Binary (vuln) C source of the binary (vuln.c) #include <stdio.h> #include <stdlib.https://d3bo.eu/en/writeups/hackthebox/buff/Mon, 18 Mar 2024 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/buff/It is a very simple machine, but we are going to analyze in depth a Buffer Overflow in CloudMe 1.11.2 and an ‘Unauthenticated Remote Code Execution’ in ‘Gym Management System 1.0’https://d3bo.eu/en/writeups/vulnhub/brainpan-1/Fri, 09 Feb 2024 00:00:00 +0000https://d3bo.eu/en/writeups/vulnhub/brainpan-1/In this machine we practice the most typical BoF (buffer overflow), the kind that usually shows up in certifications like the eCPPT or the old OSCPhttps://d3bo.eu/en/writeups/hackthebox/enterprise/Sat, 11 Nov 2023 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/enterprise/In this writeup we solve the Enterprise machine from HackTheBox. It is a very interesting medium machine: we cover WordPress and Joomla web enumeration and SQL injections, escape from a Docker container and finally exploit a very interesting buffer overflow with the ret2libc techniquehttps://d3bo.eu/en/writeups/hackthebox/jupiter/Wed, 01 Nov 2023 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/jupiter/In today’s machine we cover subdomain enumeration and turn a PostgreSQL injection into RCE. For privilege escalation we work with cron jobs, port forwarding and Pythonhttps://d3bo.eu/en/writeups/hackthebox/toolbox/Sun, 29 Oct 2023 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/toolbox/Reconnaissance First of all, we check whether the machine is up and which OS it runs ping -c 1 10.10.10.236 PING 10.https://d3bo.eu/en/writeups/tryhackme/blue/Tue, 14 Mar 2023 00:00:00 +0000https://d3bo.eu/en/writeups/tryhackme/blue/Reconnaissance First of all, we check whether the machine is up and which OS it runs ❯ ping -c 1 10.https://d3bo.eu/en/writeups/hackthebox/blue/Mon, 13 Mar 2023 00:00:00 +0000https://d3bo.eu/en/writeups/hackthebox/blue/Reconnaissance First of all, we check whether the machine is up and which OS it runs ❯ ping -c 1 10.https://d3bo.eu/en/writeups/tryhackme/chill-hack/Wed, 01 Mar 2023 00:00:00 +0000https://d3bo.eu/en/writeups/tryhackme/chill-hack/https://tryhackme.com/room/chillhack Attacker IP = 10.10.10.10 Target IP = 10.10.11.182 Reconnaissance First of all, we check whether the machine is up and which OS it runshttps://d3bo.eu/en/writeups/tryhackme/team/Thu, 09 Feb 2023 00:00:00 +0000https://d3bo.eu/en/writeups/tryhackme/team/https://tryhackme.com/room/teamcw Attacker IP = 10.10.10.10 Target IP = 10.10.67.245 Reconnaissance First of all, we check whether the machine is up and which OS it runs