CREST CTF - transmission.log
Challenge: transmission.log [Handshake Reuse / Shadow Protocol] Category: Crypto Difficulty: Easy (once you notice the reuse) Flag: CREST{mantis_reused_the_channel@ghost!} Overview This log is ...
Challenge: transmission.log [Handshake Reuse / Shadow Protocol] Category: Crypto Difficulty: Easy (once you notice the reuse) Flag: CREST{mantis_reused_the_channel@ghost!} Overview This log is ...
This was a small reversing challenge, but it does one useful thing to waste time: it embeds a string that looks like the answer even though that string is only used when the flag is printed. The ac...
Research Daemon Writeup This is my full solve note for the Research Daemon pwn challenge. Challenge text: Research Daemon 500 Ghost Mantis operates a background research daemon responsible for ...
Challenge We are given a memo file: misc/challenge_memo.txt Prompt summary: The memo looks normal. No malicious links or attachments. Ghost Mantis is known for hiding signals in plain s...
Overview This one is the opposite of ghost_mantis_scanner: the binary looks like it might hide something deeper, but the intended solve is just to pay attention to the environment variable exposed...
Overview This binary spends a lot of time pretending to be a multi-stage interactive challenge, but the shortest solve path is much more direct: reverse the final unlock path, understand how the s...
Challenge: LOVELETTER.exe Category: Forensics Difficulty: Hard Flag: THM{l0v3_l3tt3r_fr0m_th3_90s_xoxo} Overview This challenge simulates a multi-stage malware attack chain themed around...
Challenge: Cloud Nine Category: Cloud Difficulty: Hard Flags: # Flag Value 1 FLAG1 THM{CUPID_ARROW_TEST_USER} 2 ...
Challenge: Chains of Love Category: Web Difficulty: Hard Target IP: 10.48.151.212 Tools Used: nmap, gobuster, ffuf, curl, python3, PyJWT Flag: THM{s4ndb0x_3sc4p3d_w1th_RCE_l1k3_4_pr0} ...
Task 0 Find the key! This challenge is unlocked by finding the Side Quest key in Advent of Cyber Day 17. If you have been savvy enough to find it, you can unlock the machine by visiting MACHINE_IP...