Writeups for all of the different CTFs I’ve done, mostly TryHackMe and HackTheBox in prep before starting the private OSCP and Proving Grounds labs. Will be doing more in the future to try to learn more advanced AV evasion and binary exploitation (the latter more for fun than usefulness).
Brainpan-1
A medium Windows and Linux box from TryHackMe, use a remote Windows buffer overflow for initial access, then leverage sudo priveleges for the man command to get root.
Gatekeeper
A medium Windows box from TryHackMe, exploit a service vulnerable to buffer overflow for initial access, then extract credentials from firefox to get root.
Brainstorm
A medium Windows box from TryHackMe, notice a chat applications code on an open FTP server - also running on port 9999, and see that it’s vulnerable to a buffer overflow.
Mr Robot
A medium Linux box from TryHackMe, use abuse wordpress admin for initial access, then an SUID binary for root.
Attacktive Directory
A medium Windows box from TryHackMe, a focus on Active Directory, using various Impacket scripts to AS-REP roast for initial access and pass the hash to get Admin.