4 flags away from 100% the skill checks

Cyber Security Penetration Testing Professional
,
1

eCPPT course, i only need to get:

Flag 4 in Client-Side Attacks CTF1
Flag 2, 3 & 4 in Command & Control CTF1

any help would be appreciated!

2

Hi I can help you with C&C. Following some tips for finding the flags:

  • flag2: create a stager using empire and put it in a file called update.bat. The you have to find a page for uploading the file. Try using gobuster with -x flag and the extension
  • flag3: search inside the user directories and you will find the flag and a file with some credentials
  • flag4: using the credentials try to access the system
1 Like
3

Wow well done! And thanks!!

4

You’re welcome, I’m trying to complete Network Pentest flag 4 & 5 and Client side flag 4

5

Can you explain a bit in detail the process of uploading the file? I’m trying to use POST (because PUT isn’t allowed) but I’m still receiving an error:

404 Not Found

Not Found

The requested URL was not found on this server.

Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 Server at 10.3.18.255 Port 443
6

Hi, just enumerate a little bit more and you will find a page that has an upload form.

7

Ty, I just found the upload form :smiley: