Pretty_Links
Forensics
No technique tags yet.
Medium Shaym Initial Access
Following the compromise of a partner, your colleague has to capture the file system of a victim machine. In addition to that, a strange file attracted attention during its investigation.
Find the binary used to initiate the indirect command execution
Find the IP and port of the attacker
Format: GCC{cmd.exe:127.0.0.1:8080}
https://mega.nz/file/wLVTHYzB#7Z3VMEUT1LEfIiMacMyciHu2CsNrKzIwaRIot-f15zg https://drive.google.com/file/d/1_mOD_243i84Hdvah2NZ66TmK3TVLNxkV/view?usp=drive_link
Writeups
Official
No official writeup linked.
Community
No community writeups yet. Solved it? Share how.
Log in to add a community writeup.