This was the first edition of BUG PWN Conference. It was a quite fun one. Link to the presentation: C2 servers: From dedicated servers to Telegram bots P.S. Jump from the 20th min to 49th minute (I had a technical issue during the presentation. Don’t worry, you won’t miss anything; I managed to catch up :)

This is a yearly conference organized by Eyesopensecurity. I was privileged to be one of the selected speakers. My topic was “The Art of Hunting down threat actors”. Structure of the presentation: What does a cybercrime investigator do? What are the errors made by TAs? (thanks to which they get caught) Workshop (where I briefly show what this job entails) Links to the presentation: PART 1, PART 2 Apologies, but there seem to be a gap between PART 1 and PART 2.

This writeup is that of the OSINT task of this CTF. OSINT [500 pts] Task description: Catch me if you can TheBox.eml Solution: The email provided (TheBox.eml) can be opened and viewed using Microsoft Outlook or ThunderBird: So, the sender ([email protected]) claims to be writing this email to [email protected] on behalf of Sundar Pichai. NB: This should be flagged as suspicious, because, why would an employee of Alphabet Inc send a business email using their personal email and not a business email (which should be of the form name@companyname.

P.S. I initially published this article on medium on 19.10.2019. Disclaimer: I am a newbie in the security field. In fact, I am a noob (as rightly said on HTB), so I still got a long and hopefully interesting journey. The following might be quite basics or boring for some of you experts out there, but I hope to get some criticism from you, and why not reach other newbies like myself.