About Terminals Escape Ed Smart Bracers Frosty Keypad Graylog Holiday Hack Trail Beating the hash Invulnerability Linux Path Mongo Pilfer Nyanshell Xmas Cheer Laser Zeek JSON Analysis Objectives Find the Turtle Doves Unredact Threatening Document Windows Log Analysis: Evaluate Attack Outcome Windows Log Analysis: Determine Attacker Technique Network Log Analysis: Determine Compromised System Splunk Get Access To The Steam Tunnels Bypassing the Frido Sleigh CAPTEHA Retrieve Scraps of Paper from Server Recover Cleartext Document Open the Sleigh Shop Door Filter Out Poisoned Sources of Weather Data Other Final screen Map Santa's helper About: The SANS Holiday Hack, aka Kringlecon more recently, is a great online challenge/ctf/game.
Read More

In this blog post I'll show how to make a "map hack" for Warcraft 2 - that is, a means of revealing the whole game map without the use of cheats, or manually exploring the game world. Needless to say this type of hack can give you quite an advantage in multiplayer strategy games. I've decided to target the GoG re-release of Warcraft 2 as I enjoy retro gaming and hopefully this will avoid any legal threats.
Read More

In the game "Diablo" (the first/original one) there is a character named "Wirt" who sells magic items... but he only sells one at a time, and in order to just see what he currently has for sale you have to pay him 50 gold. Back in 2008 I made a "hack" which tells you the name of the item Wirt has for sale - saving you the 50 gold and time spent walking to him.
Read More

Typically sites store their users' passwords "encrypted" or "hashed" (which applies a function or algorithm to the user's password to produce a different value) - though this is not always the case. In order to "crack passwords" (that have been "hashed", and presumably retrieved when a website is hacked) we need to test input values, combined with the same function or algorithm (and sometimes a "salt"), so see which produces the same hash value - allowing us to discover the original password (this is a bit like working out what numbers multiplied together resulted in a known total, eg: "20 = 5 x ?
Read More

Contents: Terminals The Name Game Essential Editor Skills Stall Mucking Around CURLing Master Dev Ops Fail Python Escape From The Sleighbell Lethal ForensicELFication Yule Log Analysis Badge Scan-O-Matic 4000 Snort Challenge Objectives Not typed up :/ Terminals: 1. The Name Game One of the first challenges we get is from Minty Candycane, who says: Hi, I'm Minty Candycane. Can you help me? I'm in a bit of a fix. I need to make a nametag for an employee, but I can't remember his first name.
Read More

I recently tried to buy some cinema movie tickets at SterKinekor. There were no seats currently booked for the show, so I chose a line of 5 in the middle of a row (no empty seats between them). Upon clicking to proceed I was greeted with this stupid message: Movies are best enjoyed together. Please choose seats that don’t leave a single space The seats I wanted, in blue What? I wasn't leaving any open seats - except for the rest of the row to the left and right of the ones I was booking.
Read More