CTF Writeups

Welcome to my CTF Writeups repository! Here, I document the solutions and methodologies used to solve various Capture The Flag (CTF) challenges. This repository is intended to serve as a learning resource for others interested in cybersecurity and CTF competitions.

Introduction

Capture The Flag (CTF) competitions are a popular way to practice and improve cybersecurity skills. These competitions present various challenges that require problem-solving, creativity, and technical knowledge. This repository contains my writeups for different CTF challenges I have participated in.

Writeups

Here is a list of the writeups included in this repository:

Pentesting

• Agent Sudo
• Anonymous
• Basic Pentesting
• Blogger1
• Bounty Hacker
• Colddbox THM
• Colddbox Vulnhub
• Easy peasy
• IDE
• Lazy Admin
• Photographer
• Mr Robot
• RickdiculouslyEasy 1
• Raven 1
• Toolsrus

IDS/IPS

• Snort Challenge
• Snort Challenge: Live Attacks

Network Forensics/Packet Analysis

• Zeek Exercises
• Masterminds
• Warzone 1
• Warzone 2
• Carnage
• TShark
• TShark Challenge 1: Teamwork
• Tshark Challenge II: Directory

SIEM (ELK, Splunk, etc)

• ItsyBitsy
• Investigating with Splunk
• Benign
• SlingShot
• Conti
• PS Eclipse
• New Hire Old Artifacts
• Boogeyman 3

Digital Forensics

• Monday Monitor
• Retracted
• Unattended
• Disgruntled
• Secret Recipe
• Critical
• Tempest
• Boogeyman 2
• Ramnit
• Reveal
• FakeGPT
• Brave
• Redline
• Memory Analysis
• Lockbit
• WinRar 0-Day

Email Analysis

• Greenholt Phish
• Snapped Phish-ing Line

Cyber Threat Intelligence (CTI)

• Trooper
• Yellow RAT
• GrabThePhiser
• Red Stealer

Log Analysis and Network Forensics

• Boogeyman 1
• PacketDetective
• DanaBot
• Web Investigation
• WebStrike
• PoisonedCredentials
• TomCat Takeover
• PsExec Hunt

Malware Analysis

• MalBuster
• Mr. Phisher
• Dunkle Materie
• Maldoc101

Each writeup contains a detailed explanation of the challenge, the steps taken to solve it, and the tools used.

Challenges

The challenges covered in this repository span various categories, including:

• Web Exploitation
• Brute-forcing
• Network Scanning and Enumeration
• Privilege Escalation
• Steganography
• SMB Enumeration and Exploitation

Tools Used

Some of the tools frequently used in these writeups include:

Network Scanning and Enumeration

• Nmap
• GoBuster
• WPScan
• enum4linux

Vulnerability Scanning and Exploitation

• Burp Suite
• Metasploit
• Nikto
• Hydra
• John the Ripper

Packet Analysis and Network Monitoring

• Wireshark
• TShark
• Snort
• Zeek
• Brim
• NetworkMiner

Binary Analysis

• Binwalk

Log Analysis and SIEM

• ELK
• Splunk
• Wazuh
• Event Viewer
• Sysmon-View

Cyber Threat Intelligence (CTI)

• OpenCTI
• Mitre ATT&CK Matrix

Malware Analysis

• pestudio
• Detect It Easy
• capa
• Floss
• ProcDOT
• Olevba
• Oledump

Forensics and Incident Response

• Autopsy
• Registry Explorer
• Volatility3