TryHack3M: Bricks Heist
概述
本仓库记录了 TryHack3M: Bricks Heist 挑战——一个中等难度的 CTF 房间，涉及：
仓库结构
TryHack3M-Bricks-Heist/
│
├── README.md ← You are here
│
├── Exploit/
│ ├── README.md ← Detailed exploit documentation
│ ├── brickbreaker.py ← The exploit tool
│ └── requirements.txt ← Python dependencies
│
└── WriteUp/
└── WRITEUP.md ← Full challenge walkthrough
| 目录 | 内容 | 链接 |
|---|
| Exploit/ | BrickBreaker v2.2 — 自定义 CVE-2024-25600 漏洞利用工具，支持交互式 Shell | 了解更多 |
快速开始
30 秒内获得 Shell
# Clone the repository
git clone https://github.com/h0w1tzxr/TryHack3M-Bricks-Heist.git
cd TryHack3M-Bricks-Heist/Exploit
# Set up environment
python3 -m venv brickbreaker && source brickbreaker/bin/activate
pip install -r requirements.txt
# Launch exploit
python3 brickbreaker.py https://target.com
阅读完整解题报告
直接跳转到完整解题报告，查看该挑战从头到尾的完整解题过程。
漏洞利用
BrickBreaker v2.2
针对 WordPress Bricks Builder 的未认证远程代码执行
██████╗ ██████╗ ██╗ ██████╗██╗ ██╗ ██████╗ ██████╗ ███████╗ █████╗ ██╗ ██╗███████╗██████╗
██╔══██╗██╔══██╗██║██╔════╝██║ ██╔╝ ██╔══██╗██╔══██╗██╔════╝██╔══██╗██║ ██╔╝██╔════╝██╔══██╗
██████╔╝██████╔╝██║██║ █████╔╝ ██████╔╝██████╔╝█████╗ ███████║█████╔╝ █████╗ ██████╔╝
██╔══██╗██╔══██╗██║██║ ██╔═██╗ ██╔══██╗██╔══██╗██╔══╝ ██╔══██║██╔═██╗ ██╔══╝ ██╔══██╗
██████╔╝██║ ██║██║╚██████╗██║ ██╗ ██████╔╝██║ ██║███████╗██║ ██║██║ ██╗███████╗██║ ██║
╚═════╝ ╚═╝ ╚═╝╚═╝ ╚═════╝╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝
解题报告
TryHack3M: Bricks Heist — 完整演练
从漏洞利用到威胁行为者归因
本解题报告涵盖完整的攻击链与调查过程：
挑战答案预览
工具与技术
| 工具 | 用途 |
|---|
 |
免责声明
╔══════════════════════════════════════════════════════════════════════════════╗
║ WARNING ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ ║
║ This repository is for EDUCATIONAL and AUTHORIZED SECURITY TESTING only. ║
║ ║
║ • Only use on systems you OWN or have EXPLICIT WRITTEN PERMISSION to test ║
║ • Unauthorized access to computer systems is ILLEGAL ║
║ • The authors are NOT responsible for any misuse or damage caused ║
║ • Always follow RESPONSIBLE DISCLOSURE practices ║
║ ║
╚══════════════════════════════════════════════════════════════════════════════╝
参考资料
致谢
如果你觉得这个仓库有用，请为它点个 Star
由 constantines 创建
黑客愉快！
