Post

CyberApocalypse_2023 - Forensic - Roten (Easy)

Forensic - Roten (Easy)

Fig 1

Pcap file for this challenge

Fig 2

Commands found in the web request

Fig 3

The php file with the suspicious content

Fig 4

The obfuscated php file

Fig 5

The flag should be hidden inside.

Save the code as “challenge.php”

Line 67 - Amend “eval” to “echo”

Fig 6

Getting the flag

1
strings Challenge.pcap | grep HTB

Fig 7

This post is licensed under CC BY 4.0 by the author.