Ethical Hacking CTF Walkthrough | TryHackMe Hackfinity Battle 🔐

TryHackMe Hackfinity Battle Encor walkthrough begins with a warm greeting and a heads-up about the video’s two-hour runtime. The creator sets the tone for an immersive ethical hacking experience. The TryHackMe Hackfinity Battle is presented as a well-rounded CTF with categories including forensics, cryptography, reversing, game hacking, and blockchain exploitation.
****
Receive Cyber Security Field, Certifications Notes and Special Training Videos
https://buymeacoffee.com/notescatalog/membership
Writeup
https://motasem-notes.net/tryhackme-hackfinity-battle-encore-writeup-ethical-hacking-ctf-walkthrough/
******
Store
https://buymeacoffee.com/notescatalog/extras
Patreon
https://www.patreon.com/motasemhamdan
Instagram
https://www.instagram.com/mastermindstudynotes/
Google Profile
https://maps.app.goo.gl/eLotQQb7Dm6aiL8z6
LinkedIn
[1]: https://www.linkedin.com/in/motasem-hamdan-7673289b/
[2]: https://www.linkedin.com/in/motasem-eldad-ha-bb42481b2/
Instagram
https://www.instagram.com/mastermindstudynotes/
Twitter
https://twitter.com/ManMotasem
Facebook
https://www.facebook.com/motasemhamdantty/
***
0:00 - 🎉 Introduction and Overview of the Hack Infinity CTF
1:03 - 🔍 Catch Me If You Can: Forensics Challenge
4:36 - 🕵️‍♂️ Hidden Message: Image Steganography Using Pigpen Cipher
10:36 - 🏠 Safe House Address via Open Source Intelligence
12:26 - 🌐 Notepad Online: IDOR Vulnerability Exploitation
15:19 - 🔐 Dark Encryptor: Command Injection
18:02 - 🔐 Dark Encryptor 2: Blind Command Injection via File Upload
24:29 - 🧩 Crypto Channels: Known Plaintext XOR Decryption
26:16 - 🦠 Dark Matter: Ransomware Decryption Using Debug Info
29:10 - 🪝 Ghost Phishing: Malicious Word Doc to Gain Reverse Shell
33:55 - 🛡️ Dump: Lsass Dump and Pass-the-Hash
38:20 - 📍 Shadow Phishing: Backdoor via Trusted Contact Email
44:27 - 🔗 Blockchain 1: Reading Contract Storage for Flag
48:40 - 🔗 Blockchain 2: Ownership Takeover and Withdrawal
56:57 - 🎮 Game Reversing: Gdscript Score Manipulation
62:03 - 🎮 Game Reversing 2: Godot Project Recovery
65:07 - 🤖 Evil GPT 1: AI Prompt Command Injection
68:28 - 🤖 Evil GPT 2: Bypassing AI Filters via Social Prompt Engineering
73:01 - 🧾 Stall Mount: PCAP Analysis, Zip Extraction, QR Code
78:10 - 🕳️ Infinity Shell: Webshell Discovery via Logs
82:57 - 🐚 Sneaky Patch: Kernel Backdoor Analysis
86:31 - 🔍 Hide and Seek: Investigating Persistence Mechanisms
93:52 - 💀 Cipher Service: Systemd Service Malware
94:36 - ✉️ Welcome Message Backdoor (MOTD)
96:10 - 🛠️ SQL Dump: SQLMap Blind Injection Analysis in PCAP
107:23 - 🔐 Shadow Phishing 2: Custom Cipher Decryption
109:40 - 🔐 Cryptosystem: RSA-like Decryption with Custom N
112:22 - 🏦 Flag Vault: Classic Buffer Overflow
117:27 - 🏦 Flag Vault 2: Format String Vulnerability
125:13 - ☁️ Cloud Challenge 1: Retrieve Flag from Secret Manager
128:05 - ☁️ Cloud Challenge 2: Phishing S3 Bucket Logs
131:09 - ☁️ Cloud Challenge 3: Encrypted Data in S3 with KMS
133:58 - 🔐 Decrypting with KMS via Role Assumption
140:05 - 🧙‍♂️ Computer Magic: Ghidra Binary Reverse Engineering
147:35 - 🔑 Alt Authentication: Reversing Custom XOR & Input Checks
160:44 - 🏁 Conclusion and Write-up Announcement