Just a Blog by Sharkkcode ... 紀錄，也是一種享受生活的方式 XD

題目： https://app.hackthebox.com/machines/Titanic 靶機的 IP 以下統一用 HTB_TARGET_IP 代表 ( 每次 spawn 都不一樣，請自行代換 ) 。 目標： 拿到靶機上的 user.txt 和 root.txt 的內容。 靶機已退役 ( 2025/02/15 release ，難度 Easy ，Linux ) ，本文僅供教育與學習用途，請勿將文中技術用於未經授權的系統，文中也不會貼出 flag 內容。 nmap 掃描 HTB_TARGET_IP sudo nmap -sSCV -A -Pn HTB_TARGET_IP 大致結果： PORT STATE SERVICE VERSION22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 (Ubuntu Linux; protocol 2.0)80/tcp open http Apache httpd 2.4.52|_http-server-header: Apache/2.4.52 (Ubuntu)|_htt ...

題目： https://app.hackthebox.com/machines/LinkVortex 靶機的 IP 以下統一用 HTB_TARGET_IP 代表 ( 每次 spawn 都不一樣，請自行代換 ) 。 目標： 拿到靶機上的 user.txt 和 root.txt 的內容。 靶機已退役 ( 2024/12/07 release ，難度 Easy ) ，本文僅供教育與學習用途，請勿將文中技術用於未經授權的系統，文中也不會貼出 flag 內容。 nmap 掃描 HTB_TARGET_IP sudo nmap -sSCV -Pn HTB_TARGET_IP -sS 代表 SYN 掃描 ( 不進行完整的三次握手 ) 。 -sC 代表執行內建的預設腳本掃描。 -sV 代表服務版本探測。 -Pn 代表 no ping mode ( 適用於目標封鎖 ICMP 或防火牆過濾 ping 的情況 ) 。 大致結果： 22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.10 (Ubuntu Linux; protocol 2.0)80 ...

我想要自己也可以玩，所以不想玩恐怖的... 最近突然看到很多形形色色的解謎遊戲網站，可能是 AI 很方便，大家更容易把自己的想法做出成果。有天在我跟朋友分享一個我不敢自己玩的微恐怖解謎網站遊戲後，朋友推給我另一個適合我自己玩不恐怖的，它是 溪埕國民小學失蹤事件 ，我第一個反應是：「ㄟ？這次網址不是 xxx.github.io 了🤣 來玩一下好了！」 我的解題過程 ( 有劇透，所以建議想要有遊戲體驗的先不要看！ ) 話雖如此，但我還是覺得我的遊戲體驗也不多？應該說我覺得我沒有很融入故事的內容🫠 即便看過很多類似的網站，但是這個算是我第一個認真想要解的，可能之後想要跟朋友炫耀吧... 言歸正傳，一開始最大的難題就是：我根本不知道怎麼樣算開始怎麼樣算結束！只是感覺像是要找到這個網站背後想要闡述的故事？然後可能會有一個「最終之地」代表我結束遊戲或通關之類的？總之，我就以這種什麼都不懂的狀態開始亂逛網頁了👍 整體網頁是傳統的網頁，連結多到有點想要直接寫個爬蟲開始掃，但是我先用我直覺點了 留言板 ，好巧不巧就看到了一行「 1742 本留言暫不顯示」。再用直覺看了 page source ，誤 ...

OSINT Exercise 011 解題紀錄 任務 https://gralhix.com/list-of-osint-exercises/osint-exercise-011/ 任務要求：找出圖中四位人物的名稱。 這題我找 剝殼雞蛋 跟我一起解，原先是想要比誰先解出來，但是因為太難所以決定合作🥺 我們的解題過程 首先先放個我們看完題目後的心理狀態： 單看圖片沒有什麼頭緒，先用圖片搜尋來看有沒有其他的線索。 找到 As Libyan parties delay naming unity government, UN urges steps to end political divisions 這篇文章，其中有一張圖片幾乎與原圖如出一轍，圖片下方有註釋：「 Signing of the Libyan Political Agreement in Skhirat, Morocco, 17 December 2015. 」 ，到這邊我們可以推斷出幾件事情： 知道照片拍攝於 2015/12/17 。 影片中的人們應該正在簽署 Liby ...

Use Ghidra to find the offset of SSL_write() in the chrome.dll file from Chrome version 129.0.6668.71 You need to first prepare Chrome version 129.0.6668.71 . SSL_write() is located in boringssl ( boringssl/ssl/ssl_lib.cc ) , a third-party library used by Chrome. Finding the location of SSL_write() in the source code first will help locate its offset in chrome.dll later. Search for the source code of boringssl/ssl/ssl_lib.cc Now, let's start looking for the source code of Chrome version 129.0.66 ...

This is my Web Security Academy SQL injection lab writeups. https://portswigger.net/web-security/sql-injection Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data Description This lab contains a SQL injection vulnerability in the product category filter. When the user selects a category, the application carries out a SQL query like the following: SELECT * FROM products WHERE category = 'Gifts' AND released = 1 To solve the lab, perform a SQL injection ...

CSAW CTF Qualification Round 2024 Writeups This is the writeup for my competition. It includes the solutions to the problems I solved during the contest, as well as some problems I managed to solve after the event. It's meant to share some of my thought processes, the techniques I learned, and the skills I acquired through solving these problems. Competition website link: https://ctf.csaw.io/ Backup of competition problems: https://github.com/osirislab/CSAW-CTF-2024-Quals INTRO Flag ( Ques ...

CVE-2024-6239 This is my first CVE!!! I am preparing to share the process of how I discovered, explored, and submitted this CVE. The structure of this topic will be presented as a directory that reflects the entire process of vulnerability discovery and CVE application from start to finish. The process involves selecting a target project, narrowing down the scope, reviewing the source code (since the project I’m researching is open-source), conducting fuzzing tests on areas of interest, analyz ...

Detailed Guide to Getting Started with Windows ETW Disclaimer: The following content is based on information from the internet and some of my own notes, aimed at a more comprehensive study and recording of ETW-related knowledge. Environment Operating System: Windows 10 21H1 Introduction to ETW History ETW (Event Tracing for Windows) was first introduced in Windows 2000, after which the operating system core and services began using ETW to log events. After Windows Vista, ETW introduced a uni ...

Understanding Yara, Sigma, and Snort Rules in Cybersecurity In the field of cybersecurity, Yara , Sigma , and Snort are essential tools used for creating and implementing rules to detect and respond to security threats. Each tool serves a unique purpose and has its own strengths and weaknesses. This article provides an overview of these tools, including a practical examples of Yara rules and detailed installation and usage instructions for the Windows enviroment. Overview Tool Primary U ...