An investigation into the compromise of dev-jumpbox, an Alpine Linux 3.24.3 host, through SSHole (CVE-2026-123158), an OpenSSH password authentication bypass affecting musl-based systems without PAM. This writeup follows the attack from the exposed service account to the activity that followed: a port sweep of the local subnet, a remotely fetched script, and the exfiltration and shredding of forensic evidence
An investigation into a malicious PDF that stages files and establishes persistence.
So whilst travelling back home, I had time on my hands since I arrived at the airport 5 HOURS early...
Nov 09, 2025
Welcome to a comprehensive guide through five interesting cryptographic and steganographic challenges! Each one teaches a different technique for hiding...
ANALYSIS AND INSIGHTS REPORT
This is a solution submitted to the crackmes.one challenge by BitFriends Challenge Description Author: BitFriends Language: Assembler Upload: 7:05 PM...
This is a solution submitted to the crackmes.one challenge by b4te
In today’s digital landscape, network security is a critical concern for organizations and individuals. Cyberattacks are becoming increasingly sophisticated, making...
Overview
Scenario In this very easy Sherlock, you will familiarize yourself with Unix auth.log and wtmp logs. We’ll explore a scenario...
Scenario
Sherlock Scenario The IDS device alerted us to a possible rogue device in the internal Active Directory network. The Intrusion...
Scenario
Crackme1
Let’s start with a basic warmup, can you run the binary?
This site is a great reference point for x86_64 CPU architecture registers.
Web Strike Analysis
Description
Download this image and find the flag.
Image
Challenge Description The program provided allows you to write to a file and read what you wrote from it. Try...
