add challenge

noonomyen · Sep 30, 2024 · c4780f2 · c4780f2
1 parent ee76570
commit c4780f2
Show file tree

Hide file tree

Showing 20 changed files with 75 additions and 3 deletions.
diff --git a/...top-talent-2024-senior-qualifier/challenges/network-security/encrypted-c2-v2.md b/...top-talent-2024-senior-qualifier/challenges/network-security/encrypted-c2-v2.md
@@ -1,3 +1,25 @@
 # Encrypted C2 v2
 
-## WIP
+![1.png](../../images/network-security/encrypted-c2-v2/1.png)
+
+[open_netsec3.pcapng](../../files/open_netsec3.pcapng)
+
+## Solving
+
+![2.png](../../images/network-security/encrypted-c2-v2/2.png)
+
+export ไว้รอเลย
+
+![3.png](../../images/network-security/encrypted-c2-v2/3.png)
+
+จากที่ดูคือเราต้องเอา maps ไปใช้ในการถอดรหัส จะได้จาก handshake และ ข้อความจะเกิดขึ้นตอน callback
+
+![4.png](../../images/network-security/encrypted-c2-v2/4.png)
+
+เราเลยเขียน code loop ถอดมันทุกแบบไปเลย
+
+## Result
+
+![5.png](../../images/network-security/encrypted-c2-v2/5.png)
+
+it work
diff --git a/...ber-top-talent-2024-senior-qualifier/challenges/network-security/http-mayhem.md b/...ber-top-talent-2024-senior-qualifier/challenges/network-security/http-mayhem.md
@@ -1,3 +1,33 @@
 # HTTP Mayhem
 
-## WIP
+![1.png](../../images/network-security/http-mayhem/1.png)
+
+[open_netsec1.pcapng](../../files/open_netsec1.pcapng)
+
+## Solving
+
+เราเปิดมาพบ 2 stream ที่เป็น http
+
+![2.png](../../images/network-security/http-mayhem/2.png)
+
+มันคือ code python ที่เอาไว้ใช้ทำอะไรสักอย่าง
+
+![3.png](../../images/network-security/http-mayhem/3.png)
+
+รูป
+
+![4.png](../../images/network-security/http-mayhem/4.png)
+
+เราจึงลองเอารูปนั้นมาเปิดดู แต่ทำไมไม่มีอะไรเลย ?
+
+![5.png](../../images/network-security/http-mayhem/5.png)
+
+เราจึงกลับไปดูที่ code เราจึงเดาๆได้ว่า code นี้ใช้ในการซ่อนข้อมูลใน pixle bit สุดท้าย
+
+![6.png](../../images/network-security/http-mayhem/6.png)
+
+เราจึงเขียนแก้ code ให้ใช้เป็นการถอดรหัส
+
+## Result
+
+![7.png](../../images/network-security/http-mayhem/7.png)
diff --git a/...-top-talent-2024-senior-qualifier/challenges/network-security/slient-whisper.md b/...-top-talent-2024-senior-qualifier/challenges/network-security/slient-whisper.md
@@ -1,3 +1,23 @@
 # Silent Whisper
 
-## WIP
+![1.png](../../images/network-security/slient-whisper/1.png)
+
+[open_netsec2.pcapng](../../files/open_netsec2.pcapng)
+
+## Solving
+
+![2.png](../../images/network-security/slient-whisper/2.png)
+
+หน้าที่ของเราคือต้องมาหาว่า password ไหนที่ใช้เข้าสู่ระบบได้สำเร็จ
+
+![3.png](../../images/network-security/slient-whisper/3.png)
+
+เราจึงทดลองด้วย key word สักตัวเพื่อดูว่ามันจะมีคำไหนบ้าง ซึ่งดูเหมือนถ้า login สำเร็จจะมีคำนี้
+
+![4.png](../../images/network-security/slient-whisper/4.png)
+
+เราจึงเอาคำนั้นไป filter ใน wireshark
+
+## Result
+
+![5.png](../../images/network-security/slient-whisper/5.png)
diff --git a/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/1.png b/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/1.png
diff --git a/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/2.png b/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/2.png
diff --git a/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/3.png b/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/3.png
diff --git a/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/4.png b/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/4.png
diff --git a/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/5.png b/...-top-talent-2024-senior-qualifier/images/network-security/encrypted-c2-v2/5.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/1.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/1.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/2.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/2.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/3.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/3.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/4.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/4.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/5.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/5.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/6.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/6.png
diff --git a/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/7.png b/...yber-top-talent-2024-senior-qualifier/images/network-security/http-mayhem/7.png
diff --git a/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/1.png b/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/1.png
diff --git a/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/2.png b/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/2.png
diff --git a/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/3.png b/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/3.png
diff --git a/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/4.png b/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/4.png
diff --git a/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/5.png b/...r-top-talent-2024-senior-qualifier/images/network-security/slient-whisper/5.png