Recon Port Discovery sudo nmap -p22,80 -sCV 10.129.26.37 Starting Nmap 7.95 ( https://nmap.org ) at 2025-09-07 13:23 PKT Nmap scan report for 10.129.26.37 Host is up (0.20s latency). PORT STAT...

Structure Looking at nginx config: cat config/default.conf server { listen 80 default_server; server_name alley.$SECRET_ALLEY; location / {...

Recon Port Scanning sudo nmap -PN -sC -sV 10.129.183.51 [sudo] password for kali: Starting Nmap 7.95 ( http...

Files We get the following files after extraction: ls -la total 72 drwxrwxr-x 4 kali kali 4096 May 3 2018 . drwxrwxr-x 4 kali kali 4096 Aug 30 16:54 .. drwxrwxr-x 4 kali kali ...

Understanding what’s happening We get two files after extraction: -rwxr-xr-x 1 kali kali 17120 Jul 19 2022 encrypt -rw-r--r-- 1 kali kali 32 Jul 19 2022 flag.enc Let’s understand what the ...

bin We have a firmware: file firmware.bin firmware.bin: Linux kernel ARM boot executable zImage (kernel >=v3.17, <v4.15) (big-endian, BE-32, ARMv5) Let’s extract it using binwalk: bin...

Recon Port Scanning sudo nmap -sC -sV -p53,88,135,139,389,445,464,593,636,3268,3269,5985,9389,49664,49667,49676,49680,49701,49739 10.10.11.174 [sudo] password for kali: Starting Nmap 7.95 ( http...

Explanation The provided code mixes elliptic curve operations with AES encryption. The goal is to figure out how the secret flag was encrypted and how we can recover it. The script works as follo...

Explanation Two RSA moduli are generated: n1 equals p times q n2 equals q times z The fatal flaw is that both moduli share the prime factor q. Two ciphertexts are given: c1 e...

The exploit is performing a GraphQL batch query brute force attack against the PIN verification system. Batch GraphQL Queries: Instead of sending individual PIN attempts, the attack bundled 1,5...