This write-up details the process of identifying and exploiting a Server-Side Request Forgery (SSRF) vulnerability to gain administrative access and retrieve the flag. The challenge provided us wi...

Project Overview In this project, I use the AWS Command Line Interface (CLI) to launch an Amazon EC2 instance that hosts a web server and create an Amazon Machine Image (AMI) from it. The AMI then...

This write-up covers extracting a hidden flag from ICMP traffic — a hands-on look at ICMP tunneling / data exfiltration, showing protocol discovery, payload extraction & reassembly, file carvin...

Catch if you can We were given this pcap file analyze. Given this pcap file, the first thing I did was apply the filter frame contains “flag” to check if any packets contained references to a fl...

Compromised server-1 We were given this pcap file analyze. Given such a challenge, the first thing I did was to identify the attacker’s IP address. This helps in getting a better understanding o...