Informational: Phishing Attempt Uncovered on 8/18/2020

Below is the phishing email’s message body: 2. The “CLICK HERE” is the phishing link that takes you to a spoofed Microsoft Office login page: The real destination URL of the “CLICK HERE” link The spoofed Microsoft Office login page 3. Sender information: 4. The originating location of the email is Los Angeles, CA: Update …

Real World “Credential-Stealing” Phishing Email SEG-Missed

We have heard it many times that Email Phishing and Social Engineering are the hardest threat vectors to remediate. Or should I say, there is no perfect solution against them since they target end users and their security awareness. Not even the cybersecurity training firm giant, SANS, is exempted to falling victim to a phishing …

Try Hack Me: Overpass 2 – Hacked

The skills to be tested and needed to solve this room are: Forensics, Wireshark, Hashcat, John, Hydra, and SUID. Analyzing the PCAP using Wireshark was a great review for me. Cracking the hash with the salt made me do extra researching on how to identify hashes and which hash-type to use to crack the them. …

Try Hack Me: Bolt

The skills to be tested and needed to solve this room are: RCE, Metasploit, and just a keen eye. This room was released today 8/12/2020, and I wanted to try if I can crack it. This is a super easy room. Perfect for anyone who wants to try ctf or hacking. I also chose to …

Try Hack Me: Brooklyn Nine-Nine

The skills to be tested and needed to solve this room are: Nmap, GoBuster, Steganography, Hydra, and Security. This room was fun because my wife and I are fans of this TV show. Shout-out to @Fsociety2006 for creating this room. Visit https://tryhackme.com and create an account for free to take advantage of this great learning …

Try Hack Me: Source Room

The skills to be tested and needed to solve this room are: ctf and CVE. Shout-out to @DarkStar7471 for creating this room. Visit https://tryhackme.com and create an account for free to take advantage of this great learning platform. I also chose to mask part of the answers so you will have to do the steps …

Try Hack Me: Basic Pentesting Room

The skills to be tested and needed to solve this room are: webapp, boot2root, and cracking. This room has been out for over a year, but it is still a great one practice. I was assigned an IP of 10.10.170.205 Shout-out to @ashu for creating this room. Visit https://tryhackme.com and create an account for free …

PASSED! EC-Council’s Certified Ethical Hacker (Practical)

What is EC-Council’s CEH Practical? It is a 6 hours practical exam built to exacting specifications by subject matter experts in the Ethical Hacking field. Professionals that possess the CEH credential are able to sit for the exam that will test their limits in unearthing vulnerabilities across major operating systems, databases, and networks. To those …

Try Hack Me: Overpass Room

The skills to be tested and needed to solve this room are: OWASP Top 10, and cron. This room is just 10 days old, and I wanted to try if I can crack it. The user flag was easy to find, but I struggled to do privilege escalation. Shoutout to NinjaJc01 for creating the room. …

Try Hack Me: Bounty Hacker Room

The skills to be tested and needed to solve this room are: Linux, tar, privesc, and security. Shout-out to @Sevuhl for creating this room. Visit https://tryhackme.com and create an account for free to take advantage of this great learning platform. I also chose to mask part of the answers so you will have to do …