https://wiki.pessinurmi.com/index.php?action=history&feed=atom&title=Hacked 2026-06-06T10:26:56Z Revision history for this page on the wiki MediaWiki 1.45.3 https://wiki.pessinurmi.com/index.php?title=Hacked&diff=294&oldid=prev 2022-09-30T10:51:41Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 10:51, 30 September 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[File:Hacked-task.PNG|thumb|Hacked task]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[File:Hacked-gobuster.PNG|thumb|Gobuster searching SQL files]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[File:Hacked-database.png|thumb|Hacked database dump file]]</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Description===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>===Description===</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>This web server was defaced by hackers.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>This web server was defaced by hackers.</div></td></tr> <!-- diff cache key my_wiki:diff:1.41:old-290:rev-294:php=table --> </table>

Exf https://wiki.pessinurmi.com/index.php?title=Hacked&diff=290&oldid=prev 2022-09-30T10:49:45Z

<p>Created page with &quot;===Description=== This web server was defaced by hackers. They made some modification on the system. ===Question=== Admin was able to see from the logs that a SQL database dump was made. Can you find it? Maybe this helps you forward with this incident analysis. ===Solution=== Since we were asked to search for SLQ database dump it makes sense to use gobuster here as well. The command &lt;code&gt;gobuster dir -u [url] -w /usr/share/wordlist/dirbuster/directory-list-2.3-medium....&quot;</p> <p><b>New page</b></p><div>===Description===<br /> This web server was defaced by hackers.<br /> <br /> They made some modification on the system.<br /> ===Question===<br /> Admin was able to see from the logs that a SQL database dump was made.<br /> <br /> Can you find it? Maybe this helps you forward with this incident analysis.<br /> ===Solution===<br /> Since we were asked to search for SLQ database dump it makes sense to use gobuster here as well. The command &lt;code&gt;gobuster dir -u [url] -w /usr/share/wordlist/dirbuster/directory-list-2.3-medium.txt -x slq&lt;/code&gt;. We find that there is a database.sql file in the root file of the web page. We download this file to the machine using the wget command.<br /> <br /> By looking inside this file we can see the database structure. We are interested in both the username, password and admin_panel_directory.<br /> <br /> Using the browser, I navigate to the &lt;code&gt;/zer0dium1&lt;/code&gt; folder where we find the task flag.<br /> ===Tools===<br /> * gobuster<br /> * cat<br /> ===Flag===<br /> &lt;code&gt;ctftech{hacked}&lt;/code&gt;<br /> ===Links===<br /> *[[CTF Challenges | Back to CTF Challenges page]]</div>

Exf