Search ๐Ÿ”Ž๐Ÿ–ฅ️

About Me

By

ุงู„ุณู„ุงู… ุนู„ูŠูƒู…، ุฃู†ุง ุงุณู…ูŠ ุฃุณู…ุงุก 

ุฎุฑูŠุฌุฉ ุนู„ูˆู… ุญุงุณุจ ูˆู…ู‡ุชู…ุฉ ููŠ ุงู„ุฃู…ู† ุงู„ุณูŠุจุฑุงู†ูŠ، ููŠ ู‡ุฐู‡ ุงู„ู…ุฏูˆู†ุฉ ุฃุดุงุฑูƒ ู…ุนุงูƒู… ุญู„ูˆู„ ุชุญุฏูŠุงุช ุงู„ุชู‚ุท ุงู„ุนู„ู…، ูˆุฃู†ู‚ู„ ู„ูƒู… ุฃูŠ ู…ุนู„ูˆู…ุงุช ุฃุฎุฑู‰ ู…ููŠุฏุฉ. ๐Ÿ‘ฉ๐Ÿป‍๐Ÿ’ป✨



Hi, My name is Asmaa

Computer Science graduate. In this blog, I share the solutions of CTF challenges and any other useful information ๐Ÿ‘ฉ๐Ÿป‍๐Ÿ’ป✨.

=============================================

Email: asmaawork44@gmail.com


Comments

Post a Comment

Popular posts from this blog

TryHackMe|Blog WriteUp\Walkthrough (Arabic)

By
Image
ุจุณู… ุงู„ู„ู‡ ุงู„ู„ูŠ ูŠุจุบู‰ ูŠุดูˆู ุงู„ุญู„ ู…ุดุฑูˆุญ ููŠุฏูŠูˆ ูŠุฑุฌุน ู„ู„ููŠุฏูŠูˆ ุนู„ู‰ ู‚ู†ุงุชูŠ ุจุงู„ูŠูˆุชูŠูˆุจ ุนู„ู‰ ู‡ุฐุง ุงู„ุฑุงุจุท: ุฑุงุจุท ุงู„ุชุญุฏูŠ:  https://tryhackme.com/r/room/blog ==================================================== ูƒู„ู…ุฉ IP ููŠ ูƒู„ ุงู„ูƒูˆู…ุงู†ุฏุฒ ุงู„ู„ูŠ ุฃูƒุชุจู‡ุง ุชُุณุชุจุฏู„ ุจุงู„ู€IP ู„ู„ู…ุดูŠู† ุญู‚ุชูƒู… ุนู„ู‰ TryHackMe ุฃูˆู„ ุญุงุฌุฉ ู†ุดุบู„ ุงู„ู€machine ูˆู†ุชุฃูƒุฏ ุฅู†ู†ุง ุงุชุตู„ู†ุง ุจุดุจูƒุฉ TryHackMe ูˆุงู„ุงุชุตุงู„ ู…ุถุจูˆุท، ุจุนุฏูŠู† ู†ุจุฏุฃ ุจุฃูˆู„ ุฎุทูˆุฉ ู„ู„ุญู„ ูˆู‡ูŠ ุฅู†ู†ุง ู†ุณูˆูŠ scan ู„ู„ุดุจูƒุฉ ุจุงุณุชุฎุฏุงู… nmap sudo nmap IP -vv ุทู„ุน ู…ุนุงู†ุง 4 ุจูˆุฑุชุงุช، ู†ุฑุฌุน ู†ุณูˆูŠ Aggressive ุณูƒุงู† ุนู„ูŠู‡ุง sudo nmap IP -vv -A -p 22,80,139,445 ุนู„ู‰ ุจูˆุฑุช 22 ุนู†ุฏู†ุง SSH ูˆู†ุธุงู… ุงู„ุชุดุบูŠู„ ู„ุฌู‡ุงุฒ ุงู„ุถุญูŠุฉ ู‡ูˆ Ubuntu، ูˆุนู„ู‰ ุจูˆุฑุช 80 ุนู†ุฏู†ุง Apache server، ุฃู…ุง ุจูˆุฑุช 139 ูˆ 445 ู…ุชุนู„ู‚ุฉ ุจุงู„ู€smb. ุจุฑุถูˆ ุฃุนุทุงู†ุง ููŠ ุงู„ู†ุชุงุฆุฌ ุฅู† ุงู„ู€http generator ู‡ูˆ WordPress ูˆุจุฑุถูˆ ุฃุนุทุงู†ุง ุฑู‚ู… ุงู„ู†ุณุฎุฉ ูˆู‡ูˆ 5.0، ูˆู‡ุฐู‡ ู…ุนู„ูˆู…ุฉ ู…ููŠุฏุฉ ูˆู…ู‡ู…ุฉ.  ุฅุฐุง ุฒุฑู†ุง ุงู„ุตูุญุฉ ุนู„ู‰ ุจูˆุฑุช 80 ููŠ ุงู„ู…ุชุตูุญ، ุจู†ู„ุงู‚ูŠ ุจู„ูˆู‚ ู„ู„ู…ุณุชุฎุฏู… Billy ูˆููŠู‡ุง ุจูˆุณุชุงุช، ูˆู„ูƒู† ู…ุง ุจุฏุงุฎู„ ู‡ุฐู‡ ุงู„ุจูˆุณุชุงุช ุดูŠุก ู…ู‡ู….  ูˆ ุฒูŠ ู…ุง ู‚ุงู„ ู„ู†ุง ููŠ ุงู„ุชุญุฏูŠ، ุจู†ุถูŠู ุงู„ู…ูˆู‚ุน ุฅู„ู‰ ู…ู„ู etc/hosts/ ุนู„ู‰ ุงู„ุฌู‡ุงุฒ ุงู„ุญูŠู† ุจู†ุณุชููŠุฏ ู…ู† ุงู„ู€smb ุนู„ู‰ ุฌู‡ุงุฒ ุงู„ุถ...
Read more

TryHackMe|GoldenEye WriteUp\Walkthrough (English)

By
Image
Golden Eye Room Link: https://tryhackme.com/r/room/goldeneye   ===================================================== sudo nmap -p- -vv IP . You have 4 ports open 25,80,55006,55007. When you visit the website and look into the source code you will find a script terminal.js . If you take a look at the script you will find interesting notes.    We found a user boris and its encoded password. It is encoded with HTML escape and the decoded password is ********. Now use these credentials to login to /sev-home folder. The service on port 25 is smtp, and on 55006, 55007 is pop3. Some useful pop3 commands to know are: USER > To provide a username PASS > To provide a password LIST > To list the emails for a user RETR > To view the contents of an email Now with nc try to connect to port 55007 with the credentials you have it won’t work. So you will use hydra to get the password hydra -l boris -P /usr/share/wordlists/fasttrack.txt pop3://IP:55007 . And you will get the...
Read more

TryHackMe|Gallery WriteUp\Walkthrough (English)

By
Image
Gallery Room Link:  https://tryhackme.com/r/room/gallery666 ================================================================ After the Nmap scan, you will see 2 ports open 80 and 8080. 8080 doesn’t have anything interesting. In 80 the main page has the home page for nginx server. Use gobuster to find any hidden directories. There is /gallery . In /gallery you have a login page. Try to see if sqli works on it.  Enter "  ‘ or ‘1’ = ‘1’ -- - "   in the username field and see if it allows you to get in, and it did :). Once you are in you can answer the second question which is the CMS, the website uses Simple Image Gallery. Although there is a known vulnerability for this, you don’t need it. Go to albums from the top horizontal menu. Then, click on any of the albums and upload a .php webshell, I used the one from pentestmonkey. Do not forget to change the IP into your IP and set up a netcat listener with the same port number as in the shell. Once you have your webshel...
Read more