alt3kx KringleCon 2022 Write-Up

RedTeamer | PentTester | Bug Bounty | 0day guy! | Researcher | Lone Wolf...
https://alt3kx.github.io | @alt3kx |

Story

Five Rings for the Christmas king immersed in cold
Each Ring now missing from its zone
The first with bread kindly given, not sold
Another to find 'ere pipelines get owned
One beneath a fountain where water flowed
Into clouds Grinchum had the fourth thrown
The fifth on blockchains where shadows be bold
One hunt to seek them all, five quests to find them
One player to bring them all, and Santa Claus to bind them

Objectives

• Objective 0: KringleCon Orientation

  • 01. Talk to Jingle Ringford
  • 02. Get your badge
  • 03. Create a wallet
  • 04. Use the terminal
  • 05. Talk to Santa

• Objective 1: Recover the Tolkien Ring

  • 1.1 Wireshark Practice
  • 1.2 Find the Next Objective
  • 1.3 Windows Event Logs
  • 1.4 Find the Next Objective
  • 1.5 Suricata Regatta

• Objective 2: Recover the Elfen Ring

  • 2.1 Clone with a Diference
  • 2.2 Find the Next Objective
  • 2.3 Prison Escape
  • 2.4 Find the Next Objective
  • 2.5 Jolly CI/CD

• Objective 3: Recover the Web Ring

  • 3.1 Naught IP
  • 3.2 Credential Mining
  • 3.3 404 FTW
  • 3.4 IMDS XXE and Other Abbreviations
  • 3.5 Find the Next Objective
  • 3.6 Open Boria Mine Door
  • 3.7 Find the Next Objective
  • 3.8 Glamtariel's Fountain

• Objective 4: Recover the Cloud Ring

  • 4.1 AWS CLI_Intro
  • 4.2 Find the Next Objective
  • 4.3 Trufflehog Search
  • 4.4 Find the Next Objective
  • 4.5 Exploitation via AWS CLI

• Objective 5: Recover the Burning Ring of Fire

  • 5.1 Buy a Hat
  • 5.2 Blockchain Divination
  • 5.3 Exploit a Smart Contract

• Finale 6: Roll Creits

  • 6.1 Finale and Roll Credits