University CTF 2023: "Some Forensics Challenges From Last Year" by 0xdf
Source: YouTube · Hack The Box · published Dec 7, 2023 · 29:52
The video prepares viewers for the 2023 HackTheBox University CTF by solving the "Fake News" forensics challenge and sharing competition strategies 0:00.
Key Takeaways:
• The challenge involves analyzing a compromised WordPress site identified by wp- files; investigating a suspicious plugin reveals a PHP reverse shell 2:30.
• Decoding the plugin's base64 code exposes the first part of the flag within the reverse shell configuration 6:04.
• An anomalous directory leads to a script that downloads an ISO; analyzing the contained executable with strings reveals the final flag segment 10:06.
• Essential CTF strategies include reading prompts carefully, taking breaks to avoid rabbit holes, and using "rubber duck debugging" to articulate problems and find solutions 26:16.
Participants are encouraged to go "beyond root" to fully understand the attack vectors, such as identifying the Posh C2 Beacon used in the malware 18:53.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hey this is oxf and today we are getting ready for the 2023 uni CF through hack the Box uh it should be a really fun competition and I hope you all are excited about it and eager to get playing on the challenges uh in this talk SL demo we're going to go through uh my favorite topic forensics challenges from the last year um I've got two ready but I'm if the first one takes too long and I don't I don't want to overrun my time um I might just drop down to some uh General tips of how to prepare and be successful in ctfs like this um so I guess we'll we'll kind of see as we go um with that let's start with our first challenge we're going to look at today forensic Challenge from last year called fake news uh right I've got here I'm actually in the normal hack the boox website as opposed to the …