Posts with the tag ctf:

2024 Northeast CCDC Challenges

Warning Spoilers!

Challenges

This writeup goes over the challenges created by the Black Team leading up to the 2024 Northeastern CCDC Competition.

There were a total of 4 challenges:

I also go into our thought process when making the challenges.

TryHackMe 'Frank & Herby make an app'

Learn how the misconfiguration of containers can lead to opportunities for some and disasters for others.

https://tryhackme.com/room/frankandherby

TryHackMe Insekube

Exploiting Kubernetes by leveraging a Grafana LFI vulnerability

https://tryhackme.com/room/insekube

TryHackMe Umbrella

Breach Umbrella Corp’s time-tracking server by exploiting misconfigurations around containerisation.

https://tryhackme.com/room/umbrella

CloudGoat RDS Snapshot

Warning Spoilers!

This is a write up the CloudGoat scenario rds_snapshot scenario and was created by the Best of the Best 12th CGV Team (Yong Siwoo, Park Do Kyu, Park Seo Hyun, Jung Ho Shim, Chae Jinsoo).

CloudGoat SQS Flag Shop Scenario

Warning Spoilers!

This is a write up the CloudGoat scenario sqs_flag_shop and was created by the Best of the Best 12th CGV Team (Yong Siwoo, Park Do Kyu, Park Seo Hyun, Jung Ho Shim, Chae Jinsoo)

CloudGoat Glue Privilage Evasion Scenario

Warning Spoilers!

This is a write up the CloudGoat scenario glue_privesc and was created by the Best of the Best 12th CGV Team (Yong Siwoo, Park Do Kyu, Park Seo Hyun, Jung Ho Shim, Chae Jinsoo).

EKS Cluster Games

Warning Spoilers!

This walkthrough goes over the 5 EKS Cluster Game challenges created by wiz.io.

https://eksclustergames.com/

CI/CD Goat

Warning Spoilers!

This is a write up of some of the CI/CD Goat scenarios.

CloudGoat IAM Privesc by Key Rotation

Warning Spoilers!

This is a write up the CloudGoat scenario iam_privesc_by_key_rotation.