SSHole (CVE-2026-123158): Jumpbox Compromise
An investigation into the compromise of dev-jumpbox, an Alpine Linux 3.24.3 host, through SSHole (CVE-2026-123158), an OpenSSH password authentication bypass affecting musl-based systems without PAM. This writeup follows the attack from the exposed service account to the activity that followed: a port sweep of the local subnet, a remotely fetched script, and the exfiltration and shredding of forensic evidence
Malicious PDF Analysis
An investigation into a malicious PDF that stages files and establishes persistence.
Buckeye CTF Writeup
So whilst travelling back home, I had time on my hands since I arrived at the airport 5 HOURS early because I thought the traffic would be bad *turns out...
V1t Ctf 2025
Welcome to a comprehensive guide through five interesting cryptographic and steganographic challenges! Each one teaches a different technique for hiding or protecting information. Whether you’re new to CTFs or looking...
Mother Teaching Analysis Writeup
ANALYSIS AND INSIGHTS REPORT
Nasm Crack
This is a solution submitted to the crackmes.one challenge by BitFriends Challenge Description Author: BitFriends Language: Assembler Upload: 7:05 PM 04/25/2020 Platform: Unix/linux Difficulty: 1.0 Quality: 4.0 Architecture: x86-64 Challenge...
Guess The Password
This is a solution submitted to the crackmes.one challenge by b4te
Anomaly Detection In High Dimensional Network Traffic Using Isolation Forest
In today’s digital landscape, network security is a critical concern for organizations and individuals. Cyberattacks are becoming increasingly sophisticated, making it essential to detect and mitigate potential threats in real...
Brutus Hackthebox Writeup
Scenario In this very easy Sherlock, you will familiarize yourself with Unix auth.log and wtmp logs. We’ll explore a scenario where a Confluence server was brute-forced via its SSH service....
Reveal Cyberdefenders Writeup
Scenario
Noxious Htb
Sherlock Scenario The IDS device alerted us to a possible rogue device in the internal Active Directory network. The Intrusion Detection System also indicated signs of LLMNR traffic, which is...
Carnage Tryhackme
Scenario
Reverse Elf Thm
Crackme1
Let’s start with a basic warmup, can you run the binary?
Bit O Asm (1 & 2 & 3 & 4) Picoctf
This site is a great reference point for x86_64 CPU architecture registers.
Web Strike Analysis
Web Strike Analysis
Stego Picoctf
Description
Download this image and find the flag.
Image
Basic File Exploit Picoctf
Challenge Description The program provided allows you to write to a file and read what you wrote from it. Try playing around with it and see if you can break...