I’ve finished the Advent of Cyber 2024 at TryHackMe!

It was a lot of fun, and I’ve learned a lot of new topics.

https://secburg.com/posts/tryhackme-finished-advent-cyber-2024/

#tryhackme #adventofcyber2024

Advent of Cyber 2024 Day 18 Solutions https://m0ck1ngj4y.medium.com/tryhackme-advent-of-cyber-2024-day-18-prompt-injection-writeup-7a36b70357c4

#adventofcyber2024 #thm

I saw that TryHackMe's Advent of Cyber 2024 had a Web Sockets challenge and was hoping to bust out ronin-support-web's Web Socket helper methods to write up a script to exploit some kind of arbitrary bug chain. Unfortunately, it appears that you just have to change a user_id in one JSON message to get another user's data.

#tryhackme #adventofcyber2024

The #tryhackme #adventofcyber2024 is really well made.

Don't get put off by the initial walls of text and videos, you can skip the videos and skim the stuff if it's all old news.

While I'm familiar with most of the tools and challenges I'm enjoying the opportunity to refresh and update my knowledge and getting to play with the tools without first spending hours trying to get the tooling to work.

And it's all free https://tryhackme.com/r/room/adventofcyber2024

Day 3 of Advent of Code and Advent of Cyber done. Good fun fixing corrupt program" for the great people of the North Pole Toboggan Rental Shop, and researching a web attack with ELK and then testing proof of concept for the RCE.

#adventofcode #adventofcode2024 #adventofcyber2024 #adventofcyber