Mar 7 · 4 min read · In this case study, I investigated a high-severity alert from the LetsDefend platform: SOC250 – APT35 HyperScrape Data Exfiltration Tool Detected This alert simulates activity associated with APT35, a
Join discussion
Dec 31, 2025 · 5 min read · OVERVIEW So we are given IP of the machine let’s scan it using Nmap ENUMERATION So we see that Anonymous Login is allowed in FTP so let’s just dump all its contents and directories and also don’t forget to add the domain and DC name into /etc/ho...
Join discussion
Oct 9, 2025 · 2 min read · OVERVIEW So we are given some file to download . Let’s download it and check it out We got a capture.pcapng file . Let’s open it in wireshark to analyze it We can see a different types of packets Now let’s filer out them with http So Let’s Follow...
Join discussion
Oct 5, 2025 · 1 min read · OVERVIEW So we were given an instance so let’s start it and head to our attacker machine to nc into it Here we can see there is a choosing components functionality in which there is a function to create artifact in the form of zip Seeing this I th...
Join discussion
