SANS-Holiday-Hack-Challenge-2022

Write-Up By James Balkdacchino (BetaJ)

PDF Version availble to view and/or download here

Here is my write-up for The 2022 SANS Holiday Hack Challenge: 5 Gold Rings for which I was awarded a Super Honorable Mention

This was my fifth time participating in the Holiday Hack Challenge and the third time I managed to complete all objectives.

Table of Contents:

Directory

Narrative

Treasure Chests

Jason

OBJECTIVE 1 - KringleCon Orientation

OBJECTIVE 2 - Recover the Tolkien Ring

• OBJECTIVE 2A - Wireshark Practice

• OBJECTIVE 2B - Windows Event Logs

• OBJECTIVE 2C - Suricata Regatta

OBJECTIVE 3 - Recover the Elfen Ring

• OBJECTIVE 3A - Clone with a Difference

• OBJECTIVE 3B - Prison Escape

• OBJECTIVE 3C - Jolly CI/CD

OBJECTIVE 4 - Recover the Web Ring

• OBJECTIVE 4A - Naughty IP

• OBJECTIVE 4B - Credential Mining

• OBJECTIVE 4C - 404 FTW

• OBJECTIVE 4D - IMDS, XXE and Other Abbreviations

• OBJECTIVE 4E - Open Boria Mine Door

• OBJECTIVE 4F - Glamtariel's Fountain

OBJECTIVE 5 - Recover the Cloud Ring

• OBJECTIVE 5A - AWS CLI Intro

• OBJECTIVE 5B - Trufflehog Search

OBJECTIVE 6 - Recover the Burining Ring of Fire

• OBJECTIVE 6A - Buy a Hat

• OBJECTIVE 6B - Blockchain Divination

• OBJECTIVE 6C - Exploit a Smart Contract

THE END

BONUS Objective - Santa Magic

Challenge Winners and Statistics