Ghost Phishing Walkthrough

Challenge Statement#

Solution#

Opening the link and logging in with the given credentials, we see that there’s an email asking for a “Detailed Report”.
I tried attaching a txt file and sending it, I was prompted to attach a docx or docm file.

This suggests that we are supposed to upload a Macro-enabled Document file (docm)
We can use Metasploit for creating the Docm file which would create a Reverse Shell.

Now, before sending the file, we need to set up a listener using Metasploit.

Now, we can send the file. It takes a couple of minutes and we should be able to get a reverse shell access.

Traversing through the system, we are able to locate the flag.

Adapted from harishkannan05/THM-HackfinityBattle-Writeup under MIT.