Detailed technical hints, methodologies, exploit chains, and forensic walkthroughs for competitive and educational TryHackMe rooms, maintained by naval0505.
Client-side XSS exploitation in a vulnerable feedback portal. Capturing HTTP requests via local listener and exfiltrating internal flag tokens from restricted admin cookies.
Forensic analysis of a simulated Conti ransomware deployment. Event log carving, analyzing batch deployment scripts, and mapping adversary behavior to the MITRE ATT&CK framework.
Triage of three infected endpoints using Brim and Wireshark. Investigating Emotet, Ursnif, and Dridex infection sequences, calculating SHA256 hashes, and extracting C2 communication.
Deep-dive packet capture analysis of multi-stage cyber attack campaigns. Inspecting suspicious DNS TXT records, malicious SSL certificates, and C2 beacons across corporate boundaries.