Jsonquiz CorCTF 2022 writeup

Jsonquiz

Jsonquiz CorCTF 2022 writeups

We were given the link jsonquiz.be.ax.

I googled the questions and found that they are the same as in https://quizack.com/json/questions-and-answers .

Just searched the page for the answer.

I opened the network inspect tool just in case.

After i answered question 15, there was a post request with payload “score=0”

I copied the request as cUrl

curl ‘https://jsonquiz.be.ax/submit' -X POST –data-raw ‘score=0’

Red Team Recon TryHackMe Writeups

This is a writeup for the room Red Team Recon on tryhackme here

Built-in Tools

When was thmredteam.com created (registered)? (YYYY-MM-DD)

2021-09-24, got from whois.

To how many IPv4 addresses does clinic.thmredteam.com resolve?

2, got from dig.

To how many IPv6 addresses does clinic.thmredteam.com resolve?

2, got from dig with -6 flag.

Advanced Searching

How would you search using Google for xls indexed for http://clinic.thmredteam.com?

filetype:xls site:clinic.thmredteam.com

How would you search using Google for files with the word passwords for http://clinic.thmredteam.com?

First Blog

Welcome, to my blog. This blog will be used for writeups and many more. I’m using this for personal documentation. Enjoy.