Level 1: File Server, 950 / 1,350 (70%)
70.37037037037% complete
Level 2: Admin PC, 2,200 / 2,500 (88%)
88% complete
Level 3: Web Server, 2,975 / 3,750 (79%)
79.333333333333% complete
Total: 6,125 / 7,600 (80.6%)
Challenge Solved Points
10. The EHP database is encrypted using an AES 4096 bits key. Taking account of all the evidences you've got through the case ... Do you believe the EHP spanish candidates data is safe? (Level 3: Web Server) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 16:15:20) 425
9. Would you be able to identify the exact name of the malware on the previous question? (Level 3: Web Server) Second to solve this challenge! 2 years, 7 months after release (2022-06-19 16:15:07) 425
8. This computer is a webserver (hence, a juicy target). The attackers have left an extra backdoor. Locate it. (Level 3: Web Server) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 16:14:10) 400
5. What is the real name of this executable? (Level 3: Web Server) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 16:13:10) 375
4. The attackers have dropped an executable on a system folder. What's its name? (Level 3: Web Server) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 13:35:52) 350
3. What exploit would you bet that has been used to access the server? (Level 3: Web Server) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 12:42:49) 350
2.Which user first connected successfully to the server? (Level 3: Web Server) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 12:36:39) 325
1. When was the server rebooted on 03/Nov/2019? Name the system start time. (Level 3: Web Server) Second to solve this challenge! 2 years, 7 months after release (2022-06-19 12:34:43) 325
10. Which IP has connected to this computer using RDP? (Level 2: Admin PC) #4, 2 years, 7 months after release (2022-06-19 09:13:57) 300
8. There has been a recon action on this computer. When did this recon started? (Level 2: Admin PC) #4, 2 years, 7 months after release (2022-06-19 08:23:47) 275
7. Could you find the name of a program that can help exonerate Salvador? (Level 2: Admin PC) #4, 2 years, 7 months after release (2022-06-19 01:07:27) 275
6. When was the service used by the exfiltration software installed? (Level 2: Admin PC) #4, 2 years, 7 months after release (2022-06-19 01:05:11) 250
5.When was the last file successfully exfiltrated? (Level 2: Admin PC) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 00:41:47) 250
4. To which remote computer was the data exfiltrated to? (Level 2: Admin PC) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 00:41:16) 225
3. Which program has transmitted most data on 05/Nov/2019 ? (Level 2: Admin PC) #4, 2 years, 7 months after release (2022-06-19 00:38:27) 225
2.Which song is going to be used for the EHP project? (Level 2: Admin PC) Third to solve this challenge! 2 years, 7 months after release (2022-06-19 00:35:04) 200
1.Where in the system is hidden the folder "Secreto" (Secret) (Level 2: Admin PC) #5, 2 years, 7 months after release (2022-06-19 00:31:48) 200
11.Which executable do you think was used to exfiltrate data (Level 1: File Server) #5, 2 years, 7 months after release (2022-06-18 10:26:12) 175
6. Which users have connected (using any kind of protocol) to the system in last month? (Level 1: File Server) #6, 2 years, 7 months after release (2022-06-18 09:22:03) 100
10. Which registry key is the responsible for the non-matching timestamps in the previous challenge? (Level 1: File Server) #6, 2 years, 7 months after release (2022-06-17 16:03:23) 150
9. According to MFT, which time was last accessed the file README.txt.txt? And what time was REALLY opened this file with notepad.exe (Level 1: File Server) #6, 2 years, 7 months after release (2022-06-17 16:01:25) 150
8. Which user tried to mount \\*\C$ (Level 1: File Server) #7, 2 years, 7 months after release (2022-06-17 15:56:02) 125
4.EHP Project has a candidate list (the shortlist that was leaked). When was this list last accessed? (Level 1: File Server) #8, 2 years, 7 months after release (2022-06-17 15:48:17) 75
3.The EHP database is encrypted using PGP. What's the database name? (Level 1: File Server) #9, 2 years, 7 months after release (2022-06-17 15:46:53) 75
2.How many subfolders are in this shared folder (Level 1: File Server) #9, 2 years, 7 months after release (2022-06-17 15:46:44) 50
1.CHITONSRV has a shared folder. What's its name? (Level 1: File Server) #11, 2 years, 7 months after release (2022-06-17 15:46:38) 50