CactusCon 2014 CTF Writeup

This is a write up to the 2014 CactusCon web application (SpookiLeaks) challenge. You can grab the SpookiLeaks-VM here and try the challenge yourself before reading the solution.


!!! WARGING: SPOILERS BELOW !!!


The First Clue

The first clue to solving the challenge is hidden in plain sight. Before even logging in if we scan the pre-loaded images on the Spooky Images page there's one image with the ...

Continue Reading

Postfix: Using Gmail as a Relay Host

I maintain several Linux servers at any given moment. Every server has postfix installed for sending emails, usually notifications or warning messages of some sort and most of these servers are professionally hosted allowing outbound emails with little to no configuration beyond installing postfix. However, my home server lies behind my ISP and they block all outbound emails citing SPAM as the reason. Regardless of their reasoning I had to find a workaround to allow me to send email notifications ...

Continue Reading

Setting Up an Ubuntu Web Server

Having set up several Debian and Ubuntu web servers in the past I thought it would be a good idea to share my process. The following is a relatively comprehensive guide to installing and configuring an Apache based web server with some optimizations and basic resource monitoring. I primarily work with Ubuntu servers, but most of the commands here should work exactly the same in Debian or Ubuntu. I've tried to note where differences may occur.

Download and Install ...

Continue Reading

Increasing the Size of a Virtual Hard Drive in VirtualBox

I work in Linux primarily but run a Windows 7 virtual machine in VirtualBox so I can use Photoshop and do some necessary testing. Today my VM ran out of space. Silly me thought 20GB would be enough, but after installing service pack 1, dozens of Windows updates and a few programs I had less than 1GB of space left. After a little searching I found an easy way to increase the size of a virtual disk.

First, shut down ...

Continue Reading

Windows 7 Activation Hack

When installing Windows 7 it's very picky about which installation disc you use (Full vs. Upgrade) and if improperly matched with your key can prevent you from activating your copy of Windows usually returning an "Invalid Product Key" error message. You may also see the same or similar error when you do a full, clean installation with an upgrade disc. This can be very annoying, especially when you have a legitimate key and disc but just didn't install ...

Continue Reading