https://kavirun.github.io/blog/A minimal, responsive and feature-rich Jekyll theme for technical writing. 2026-06-26T07:20:38+00:00 Kaviu Nethsara https://kavirun.github.io/blog/ Jekyll © 2026 Kaviu Nethsara /blog/assets/img/favicons/favicon.ico /blog/assets/img/favicons/favicon-96x96.png 2026-06-25T00:00:00+00:00 2026-06-25T00:00:00+00:00 https://kavirun.github.io/blog/posts/Farewell/ Kaviu Nethsara

Farewell 🔍 Recon First, I ran an nmap scan: Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-25 13:58 UTC Nmap scan report for ip-10-82-129-222.eu-west-1.compute.internal (10.82.129.222) Host is up (0.00017s latency). Not shown: 65533 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.14 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: ...

2026-06-24T00:00:00+00:00 2026-06-24T00:00:00+00:00 https://kavirun.github.io/blog/posts/Padelify/ Kaviu Nethsara

Padelify 🔍 Recon First, I ran an nmap scan: Starting Nmap 7.94SVN ( https://nmap.org ) at 2026-06-25 03:45 UTC Nmap scan report for ip-10-81-157-135.eu-west-1.compute.internal (10.81.157.135) Host is up (0.00013s latency). Not shown: 65533 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 3ubuntu13.14 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: ...

2026-06-24T00:00:00+00:00 2026-06-24T17:30:07+00:00 https://kavirun.github.io/blog/posts/Mr.Phisher/ Kaviu Nethsara

Mr.Phisher 📥 Getting the Files 🕵️ First, I downloaded the challenge files through a local Python HTTP server: 💡 Opening the files, something looked suspicious. I also checked the strings — this was my first time dealing with this kind of challenge, so I did some research on extracting data from .docm files. The archive seemed to contain the same file, so I focused on one. 🔍 Analysing the...

2026-06-24T00:00:00+00:00 2026-06-24T17:30:07+00:00 https://kavirun.github.io/blog/posts/Athena/ Kaviu Nethsara

Athena 🔍 Nmap Scan 🕵️ First, I ran a full port scan to discover open services: Nmap scan report for ip-10-80-186-138.eu-west-1.compute.internal (10.80.186.138) Host is up (0.00011s latency). Not shown: 65531 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.5 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 3072 3b:c8:f8:13:e0:...

2026-06-23T00:00:00+00:00 2026-06-24T17:30:07+00:00 https://kavirun.github.io/blog/posts/Brooklyn-Nine-Nine/ Kaviu Nethsara

Brooklyn Nine-Nine 🔍 Nmap Scan 🕵️ First, I ran an nmap scan to discover open ports and services: 📂 FTP Enumeration We can see the nmap scan results. Let’s try the FTP server: 💡 It contains a note, so I retrieved it: The note says Jake’s password is weak, so let’s try brute-forcing SSH. ⚡ SSH Brute Force 🔑 Running Hydra against SSH: And I got it! Now let’s log in as Jake and try to ...