@ayleph @LayerOneCTF@layer_one@kur3us I need to finally make a site some day to put my stuff there. But! The way I would do this is to query for icmp, adding the "Data" as a column, and export to a CSV from File -> Export Packet Dissections
Then: cat file.csv | cut -d',' -f14 | sed -n '1!p' | xxd -p -r | base64 -d
@LayerOneCTF at @layer_one was pretty fun this year. My first time submitting a CTF challenge to a big conference CTF :D Hope you liked the Planet Express Forensics!
Thank you @kur3us
@CapeSandbox Oh man, does VirtualBox have networking? That's the most experience I got, I have setup cuckoo before on VirtualBox working pretty well, but not CAPE. My main machine can't run KVM, so I guess I'll setup the VM on the CAPE server itself until I upgrade from an ARM ESXi ๐
@CapeSandbox Do you think it's possible to have the VMs on another server and the CAPE host on another? Been thinking of isolating them like this for testing, instead of building it on a single hardware. Looking through the configs, can't find the right place to modify.
However, let's say I want to build CAPE on a VM to begin with, and have another VM on the side, I don't think (also) that the guest CAPE VM will be able to turn on or off the VM guest that is on its side. Just to clarify.
Just to note, I do see it's possible to do this via vmware server's config, esx, xen and such, but let's say I have VirtualBox on another machine, I don't think that's possible, correct? The only way without esx for example, is to have them on a local machine.
Ayy. Didn't think this would work, but after 2 days of pain (fun), though choppy results a bit it was a pass! Thanks to @_DC818_ and @layer_one for awesome people. Got my first @ANDnXOR badge. Can't wait to science the shit out of this tonight! And of course, #MattDamon
We're covering the last day of @wrccdc today! You can watch here, or join the chat on Twitch! We'll be taking suggestions and answering your blue/red/black team questions in Twitch chat! -> https://t.co/R0fGnEWEIi
We're covering and streaming @wrccdc today and tomorrow! You can watch here, or join the chat on Twitch! We'll be doing some interesting stuff throughout the competition. https://t.co/R0fGnEWEIi
๐v2 of my free Intro to Android App Reverse Engineering workshop is here! ๐
I've added 3 new exercises, walk-through videos for all 7 exercises, a new module on obfuscation, & exercises on vuln hunting rather than just malware. I hope it helps!
https://t.co/8h2Wjfus1t
I just published an in-depth analysis of how the #Emotet network protocol works. Also I've released a tool which emulated this protocol and is capable to download new #modules & #malware from the C&Cs.
It's integrated with @hatching_io and @CapeSandbox.
https://t.co/2491AZvGXj