GrabThePhisher blue team ctf

Category : Threat Intel

phishing

2114 Players

4.4 (775)

Easy

Which wallet is used for asking the seed phrase?

Weight : 50 | Solved : 1322

What is the file name that has the code for the phishing kit?

Weight : 50 | Solved : 1268

In which language was the kit written?

Weight : 50 | Solved : 1287

What service does the kit use to retrieve the victim's machine information?

Weight : 100 | Solved : 1112

How many seed phrases were already collected?

Weight : 100 | Solved : 1193

Write down the seed phrase of the most recent phishing incident?

Weight : 150 | Solved : 1163

Which medium had been used for credential dumping?

Weight : 150 | Solved : 1125

What is the token for the channel?

Weight : 250 | Solved : 1163

What is the chat ID of the phisher's channel?

Weight : 250 | Solved : 1165

Q10

What are the allies of the phish kit developer?

Weight : 300 | Solved : 1160

Q11

What is the full name of the Phish Actor?

Weight : 300 | Solved : 1047

Q12

What is the username of the Phish Actor?

Weight : 300 | Solved : 1045

Instructions:

Uncompress the challenge (pass: cyberdefenders.org)

Scenario:

An attacker compromised a server and impersonated https://pancakeswap.finance/, a decentralized exchange native to BNB Chain, to host a phishing kit at https://apankewk.soup.xyz/mainpage.php. The attacker set it as an open directory with the file name "pankewk.zip".

Provided the phishing kit, you as a soc analyst are requested to analyze it and do your threat intel homework.

WriteUps

Submit Writeup

Need Help?

Join our Discord server, connect with fellow defenders, and get help while solving challenges.

SHA1SUM:

a10658aa9561317b1f700331cec85f9a70ba1bf4
Password:

cyberdefenders.org
Size:

894 KB
Published:

July 23, 2022, midnight

First blood

milannshrestga

311 days ago

Last solve

hayzer

today

Authors

BlueYard

Leaderboard

Store

Contact us

Media kit

Careers

Host a live CTF

Blog