STEP 1 — Enable Automatic Updates Manual Updates: apt update apt dist-upgrade Automatic Updates: apt install unattended-upgrades dpkg-reconfigure — priority=low unattended-upgrades STEP 2 — Create a Limited User Account Create a User: adduser {username} Add user to the sudo group: usermod -aG sudo {username} STEP 3 — Passwords are for…

THM{4TT4CK SURF4C3 R3DUC3D}

What is the Challenge #1 flag? THM{n0t_just_your_u$ser} From the Challenge 1 log, what user account was created? BanditYetMini What is the Challenge #2 flag? THM{wh@t_1s_Runn1ng_H3r3} What was the User’s path in the Challenge #2 log file? SIGMA_AOC2022\Bandit Yeti What is the Challenge #3 flag? THM{sch3dule_0npo1nt_101} What was the MD5 hash associated with Challenge #3 logs? 2F6CE97FAFF2D5EEA919E4393BDD416A7

What is the Windows version number that the memory image captured? Note: this initial scan may take up towards 10 minutes to complete. Why not grab some water or stretch your legs? 10 What is the name of the binary/gift that secret Santa left? mysterygift.exe What is the Process ID (PID) of this binary? 2040 Dump the contents of this binary. How many files are dumped? 16 Author : Muhammad Zubair ~ Cyberrace

Learning Objectives Learn how data is stored in memory in games or other applications. Use simple tools to find and alter data in memory. Explore the effects of changing data in memory on a running game. What is the Guard’s flag? THM{5_star_Fl4gzzz} What is the Yeti’s flag? THM{yetiyetiyetiflagflagflag} Author : Muhammad Zubair ~ Cyberrace

Deploy the attached VM, and wait a few minutes. What ports are open? 80 What framework is the web application developed with? laravel What CVE is the application vulnerable to? CVE-2021–3129 What command can be used to upgrade the last opened session to a Meterpreter session? sessions -u -1 What file indicates a session has been opened within a Docker container? /.dockerenv What file often contains useful credentials for web applications? .env