This blog will be a run through of the beginner level CTF challenge, “RickdiculouslyEasy” image on VulnHub available at: RickdiculouslyEasy: 1 ~ VulnHub RickdiculouslyEasy: 1, made by Luke. Download & walkthrough links are available.www.vulnhub.com “This is a fedora server VM, created with virtualbox. It is a very simple Rick and Morty themed boot to root. There are 130 points worth of flags available (each flag…

This blog will be a run through of my first ever CTF challenge which was the Necromancer on VulnHub available at — https://www.vulnhub.com/entry/the-necromancer-1,154/ Flag 1: Start by launching an ARP scan against the local network to identify other active hosts. From this I found that host .102 …

So, I’ve recently passed the GIAC Intrusion Analyst (GCIA) exam after 7 months of hard self-study as I was unable to attend a SANS SEC503 training course. I’m writing this blog to explain my study methods as there isn’t much information out there for people that do wish to self-study…

HSRP provides redundancy for IP networks ensuring that traffic can transparently recover from first hop failures. Devices which share a common layer 2 domain participate in a virtual router environment ensuring that a single device assumes the egress routing role. …

VLAN hopping is a vulnerability that can be leveraged by an attacker to gain access to networked resources on another virtual LAN (VLAN) that would normally not be accessible. Two methods of exploiting this vulnerability are switch spoofing and double tagging. Take the following diagram as an example, the attacker…

If you read my previous blog article on IP Fragmentation, you should be fully versed on what it is and how it works. Although fragmentation is a normal event, it can be leveraged for malicious use so security analysts should be wary of all fragmented traffic. A great example of…

Fragmentation occurs when an IP datagram traverses a network which has a maximum transmission unit (MTU) that is smaller than the size of the datagram. Take for example a standard Ethernet datagram of 1500 bytes. If a larger size datagram was to traverse an Ethernet network, it would require fragmentation…