Skip to content

Commit 1b2a678

Browse files
committed
hiddenGem finalize
1 parent 6e85e05 commit 1b2a678

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

42 files changed

+1611
-97
lines changed

content/ctfwriteups/empirec2.md

Lines changed: 0 additions & 2 deletions

content/ctfwriteups/hgm.md

Lines changed: 605 additions & 0 deletions

content/training.md

Lines changed: 10 additions & 0 deletions

public/categories/index.html

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -148,14 +148,11 @@ <h1>Categories</h1>
148148
</header>
149149

150150
<ul class="terms-tags">
151-
<li>
152-
<a href="http://localhost:1313/categories/c2/">c2 <sup><strong><sup>1</sup></strong></sup> </a>
153-
</li>
154151
<li>
155152
<a href="http://localhost:1313/categories/forensics/">Forensics <sup><strong><sup>1</sup></strong></sup> </a>
156153
</li>
157154
<li>
158-
<a href="http://localhost:1313/categories/malware/">Malware <sup><strong><sup>10</sup></strong></sup> </a>
155+
<a href="http://localhost:1313/categories/malware/">Malware <sup><strong><sup>9</sup></strong></sup> </a>
159156
</li>
160157
<li>
161158
<a href="http://localhost:1313/categories/network-traffic/">Network-traffic <sup><strong><sup>1</sup></strong></sup> </a>

public/categories/index.xml

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -36,13 +36,6 @@
3636
<guid>http://localhost:1313/categories/phishing/</guid>
3737
<description></description>
3838
</item>
39-
<item>
40-
<title>C2</title>
41-
<link>http://localhost:1313/categories/c2/</link>
42-
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
43-
<guid>http://localhost:1313/categories/c2/</guid>
44-
<description></description>
45-
</item>
4639
<item>
4740
<title>Forensics</title>
4841
<link>http://localhost:1313/categories/forensics/</link>

public/categories/malware/index.html

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -221,15 +221,6 @@ <h2 class="entry-hint-parent">Analyzing Beep Malware
221221
<a class="entry-link" aria-label="post link to Analyzing Beep Malware" href="http://localhost:1313/posts/beepmalware/"></a>
222222
</article>
223223

224-
<article class="post-entry tag-entry">
225-
<header class="entry-header">
226-
<h2 class="entry-hint-parent">Empire is at Risk - Writeup
227-
</h2>
228-
</header>
229-
<footer class="entry-footer">8 min&nbsp;·&nbsp;connar</footer>
230-
<a class="entry-link" aria-label="post link to Empire is at Risk - Writeup" href="http://localhost:1313/ctfwriteups/empirec2/"></a>
231-
</article>
232-
233224
<article class="post-entry tag-entry">
234225
<header class="entry-header">
235226
<h2 class="entry-hint-parent">Exploring OneNote Forensic tools

public/categories/malware/index.xml

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -97,19 +97,6 @@ Let&amp;rsquo;s dive into what the Windows API is and why it&amp;rsquo;s crucial
9797
&lt;/span&gt;&lt;/span&gt;&lt;span style=&#34;display:flex;&#34;&gt;&lt;span&gt;
9898
&lt;/span&gt;&lt;/span&gt;&lt;span style=&#34;display:flex;&#34;&gt;&lt;span&gt;&lt;span style=&#34;color:#66d9ef&#34;&gt;exit&lt;/span&gt;
9999
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/div&gt;&lt;p&gt;So, let&amp;rsquo;s open the dll in IDA and view the specific function:&lt;/p&gt;</description>
100-
</item>
101-
<item>
102-
<title>Empire is at Risk - Writeup</title>
103-
<link>http://localhost:1313/ctfwriteups/empirec2/</link>
104-
<pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
105-
<guid>http://localhost:1313/ctfwriteups/empirec2/</guid>
106-
<description>&lt;p&gt;In this challenge we are given:&lt;/p&gt;
107-
&lt;blockquote&gt;
108-
&lt;p&gt;A pcap file (capture.pcap)&lt;/p&gt;
109-
&lt;p&gt;A powershell dump (powershell.DMP)&lt;/p&gt;
110-
&lt;/blockquote&gt;
111-
&lt;p&gt;A lot of times hard difficulty challenges are related to C2 traffic, and in this challenge we are given a pcap file that indicates there is a chance this might be the case. Simply searching for &lt;code&gt;Empire C2&lt;/code&gt; (Empire from the title of the challenge) will yield results related to an Empire C2 Framework.&lt;/p&gt;
112-
&lt;p&gt;Navigating through some posts, a very good one that I used as a reference while solving the challenge was:&lt;/p&gt;</description>
113100
</item>
114101
<item>
115102
<title>Exploring OneNote Forensic tools</title>

public/ctfwriteups/empirec2/index.html

Lines changed: 160 additions & 38 deletions
Large diffs are not rendered by default.

public/ctfwriteups/headstream/index.html

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -246,10 +246,10 @@ <h1 class="post-title entry-hint-parent">
246246
<br>
247247
<span>Flag on the run - Writeup</span>
248248
</a>
249-
<a class="next" href="http://localhost:1313/ctfwriteups/hintingflags/">
249+
<a class="next" href="http://localhost:1313/ctfwriteups/hgm/">
250250
<span class="title">Next »</span>
251251
<br>
252-
<span>Hinting flags - Writeup</span>
252+
<span>Hidden Gem Mixtape - Writeup</span>
253253
</a>
254254
</nav>
255255

public/ctfwriteups/hgm/index.html

Lines changed: 780 additions & 0 deletions
Large diffs are not rendered by default.

0 commit comments

Comments
 (0)