Welcome to the Advent of Cyber 2023 challenge series! In this article, we will cover multiple writeups and answers provided by Karthikeyan Nagaraj for different days of the event.
Day 19 Writeup: Memory Forensics
Learn about the importance of memory analysis in digital investigations and the examination of volatile data. Memory forensics plays a crucial role in uncovering valuable information during an investigation.
Day 22 Writeup: Server-Side Request Forgery (SSRF)
Discover the various types of SSRF attacks and the prerequisites for exploiting this vulnerability. Server-side request forgery can lead to serious consequences and it’s essential to understand its workings and how to protect against it.
Day 18 Writeup: Insider Threat Investigation
Dive into an insider threat investigation scenario where a suspicious process is causing high resource usage on a production server. Learn how to identify and remove the malicious process to mitigate the risk of compromise.
Day 21 Writeup: CI/CD Environment and Indirect Poisoned Pipeline Execution
Explore topics such as CI/CD environments, automation platforms, and indirect poisoned pipeline execution. This writeup covers tasks and answers related to finding the Linux kernel version of the Jenkins node and uncovering the value in <code>/var/lib/jenkins/secret.key</code>.
Day 1 - Day 24 Writeup: Challenges and Answers
Get access to the complete set of challenges and their corresponding answers provided by Karthikeyan Nagaraj. This comprehensive writeup also includes links to a YouTube channel featuring cybersecurity lab’s proof of concepts and writeups for further learning.
Day 23 Writeup: Network File Shares and NTLM Authentication
Delve into the world of network file shares, NTLM authentication, and intercepting authentication challenges using Responder. Gain valuable insights into how these technologies work and their significance in cybersecurity.
Thank you to Karthikeyan Nagaraj for sharing these informative writeups and answers for Advent of Cyber 2023!

Collections

This post covers writeups and answers related to memory forensics, SSRF attacks, and insider threat investigations in the Advent of Cyber 2023 challenge series.

Investigating an Insider Threat and Securing a CI/CD Environment - Advent of Cyber 2023 Writeup