kringlecon

Introduction Objective 1 - KringleCon Orientation Objective 2 - Recover the Tolkien Ring Wireshark Phishing - Sparkle Redberry Q1 - What type of objects can be exported from the PCAP?

Introduction Objective 1 - KringleCon Orientation Document Analysis - Piney Sappington Objective 2 - Where in the World is Caramel Santaigo? Grepping for Gold - Greasy Gopherguts Objective 3 - Thaw Frost Tower’s Entrance Logic Chompers - Noel McBoetie Objective 4 - Slot Machine Investigation IPv6 Sandbox - Jewel Loggins Objective 5 - Strange USB Device Holiday Hero - Chimney Scissorsticks Elevator Hack Objective 6 - Shellcode Primer - Ruby Cyster Objective 7 - Printer Exploitation HoHo … No - Eve Snowshoes Objective 8 - Kerberoasting on an Open Fire Objective 9 - Splunk IMDS Exploration - Noxious O.

Introduction Objective 1 - Uncover Santa’s Gift List Kringle Kiosk - Shiny Upatree Objective 2 - Investigate S3 bucket Linux Primer - Sugarplum Mary Objective 3 - Point-of-Sale Password Recovery Unescape Tmux - Pepper Minstix Objective 4 - Operate the Santavator Speaker lights/door/vending machine - Bushy Evergreen Objective 5 - Open HID Lock Objective 6 - Splunk Challenge CAN-D bus investigation - Wunorse Openslae Objective 7 - Solve the Sleigh’s CAN-D-BUS Problem Holly Evergreen - Redis Investigation Objective 8 - Broken Tag Generator Scapy - Alabaster Snowball Objective 9 - ARP Shenanigans Objective 10 - Defeat Fingerprint Sensor Snowball Game - Tangle Coalbox Objective 11a) - Naughty/Nice List with Blockchain Investigation Part 1 Setting up the environment Understanding the vulnerability Dumping the 32 bit PRNG integers Predicting the PRNG state Objective 11b) - Naughty/Nice List with Blockchain Investigation Part 2 Additional links Introduction Spoiler alert!

Python Escape from LA This challenge is about breaking out of a restricted shell to execute a program that resides in the directory. In this case, we are provided a Python shell but we cannot import any modules that would let us perform advanced tasks such as executing a binary.

Question 7 HR Incident Response In this challenge, we are given a website with CSV upload capability and are asked to somehow gather information from the contents of the file: C:\candidate_evaluation.

Sparkle Redberry: Dev Ops Fail In this challenge, we are asked to see if there are any credentials exposed as a result of git operations. We list the contents of the current directory and notice the directory containing the git repository.

Question 6: Badge Manipulation The objective for this challenge is simple – we need to bypass the authentication mechanism. The way the authentication works is the machine “Scanomatic” scan a QR code on an employee badge and grants access depending if the QR code matches a proper record in the back-end database.

Pepper Minstix: Yule Log Analysis As part of this challenge, we are looking at Microsoft Event Viewer Logs to discover an instance of password spraying that eventually succeeded. Password spraying is when attackers use different usernames in rotation to attempt login.

Holly Evergreen: CURLing Master We know that the candy striper machine can be turned on by sending a request to port 8080 on localhost (127.0.0.1). But we do not know what request to send.

Wunorse Openslae: Stall Mucking Report We are told that a Samba share with shared network credentials is used to upload the file on the server. These shared credentials can be revealed via ps if they were entered in command-line mode.