cyanboy

Tools of The Trade

A compiled list of tools used by Norwegian Security Champions - 🇳🇴 🕵️ 💻

• Tools of The Trade
  • Burp Suite
  • Cyber Chef
  • Dependabot
  • Gobuster
  • John The Ripper
• Nmap

cyanboy

FROM kalilinux/kali-rolling

ENV LANG C.UTF-8
ENV LC_ALL C.UTF-8

RUN apt-get update && apt-get upgrade -y && apt-get install -y python3  python3-pip python3-dev git libssl-dev libffi-dev build-essential gdb vim curl wget cmake
RUN wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh
RUN python3 -m pip install --upgrade pip
RUN python3 -m pip install capstone unicorn keystone-engine ropper pwntools

cyanboy

These four challenges were heavily inspired by the Login Sec (100) and Canadian FOI (50) task from P.W.N. CTF

Bottle

from flask import Flask, request

app = Flask(__name__)

passwd = open("passwd.txt").read()

cyanboy

Task 1 "Robots"

We visit http://193.225.218.118/ctfoct24/task1/robots.txt

Here we are greeted by

Disallow: /gammelt
Disallow: /supersecret

cyanboy

version: '3.3'

services:
   db:
     image: mysql:5.7
     volumes:
       - db_data:/var/lib/mysql
     restart: always
     environment:
       MYSQL_ROOT_PASSWORD: somewordpress

cyanboy

Keybase proof

I hereby claim:

• I am cyanboy on github.
• I am cyanboy (https://keybase.io/cyanboy) on keybase.
• I have a public key whose fingerprint is 4946 3E4D 4502 1639 DAFE 6D3A 2F88 23EF 93BA DE6B

To claim this, I am signing this object:

cyanboy

#include <iostream>
#include <string>
#include <memory>

struct Node {
  std::shared_ptr<Node> next = nullptr;
  std::string data;
  
  Node(std::string s) {
    data = s;

cyanboy

//Run this code in the developer console of your browser

var links = document.getElementsByTagName('a');  //Get array of all links

for (var i = 0; i < links.length; i++) {  //Loop through all links
    if (links[i].innerHTML == "Send Friend Request") {  
        links[i].click() 
    }  
}

cyanboy

(require 'package)

(prefer-coding-system 'utf-8)

;;Mirross
(setq package-archives '(("gnu" . "http://elpa.gnu.org/")
    ("melpa" . "http://melpa.milkbox.net/packages/")))
(package-initialize)

;;Disable splash screen