https://solvere.app/ Recent content on Solvere Labs en-us contact@solvere.app (Solvere Labs) contact@solvere.app (Solvere Labs) © 2026 Solvere Labs Sat, 20 Jun 2026 00:00:00 +0000 https://solvere.app/icon-512.png https://solvere.app/ https://solvere.app/ctfs/thm/thestickershop/ Sat, 20 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/thestickershop/ Today we are solving another easy-rated TryHackMe machine called TheStickerShop. https://solvere.app/tutorials/guides/windows-download-methods/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferwindowspowershellpost-exploitation https://solvere.app/tutorials/guides/windows-download-methods/ The Windows-native ways to pull a file when you have a shell on a Windows host: certutil, bitsadmin, PowerShell Invoke-WebRequest, WebClient, and the in-memory IEX cradle, with an honest look at how defenders see each one. https://solvere.app/tutorials/guides/smb-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfersmbwindowsimpacketpost-exploitation https://solvere.app/tutorials/guides/smb-file-transfer/ Move files to and from a Windows target over SMB: stand up a share with impacket-smbserver, then pull, run, and push back with native copy / net use or smbclient. Quick reference with a modular cheat sheet and per-command breakdowns. https://solvere.app/tutorials/guides/scp-ssh-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfersshlinuxpost-exploitation https://solvere.app/tutorials/guides/scp-ssh-transfer/ The scp and sftp quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real transfer. Upload and download, copy a directory with -r, authenticate with a recovered key, hop through a jump host, pipe over ssh when scp is missing, and verify with a checksum. https://solvere.app/ctfs/thm/oh-my-webserver/ Fri, 19 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/oh-my-webserver/ Today we are solving another Linux-based TryHackMe machine called Oh My WebServer. This machine focuses on exploiting vulnerable web services, container breakout-style enumeration, https://solvere.app/tutorials/guides/netcat-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfernetcatnetworkinglinuxpost-exploitation https://solvere.app/tutorials/guides/netcat-file-transfer/ The netcat file-transfer quick reference: flags, a modular cheat sheet, and worked breakdowns. Listen and save, connect and send, close cleanly with -N or -q0, stream a directory with tar, encrypt with socat OPENSSL, fall back to bash /dev/tcp when nc is missing, and checksum to catch truncation. https://solvere.app/ctfs/thm/investigation-with-splunk/ Fri, 19 Jun 2026 00:00:00 +0000 naval0505 thmforensicspowershellpersistencephp https://solvere.app/ctfs/thm/investigation-with-splunk/ Today we are investigating another TryHackMe Defensive Security challenge where we are provided with Windows event logs that have already been ingested into Splunk. https://solvere.app/tutorials/guides/http-file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transfernetworkinglinuxwindowspost-exploitation https://solvere.app/tutorials/guides/http-file-transfer/ The HTTP file-transfer quick reference: serve a folder from your attacker box in one line, then pull files onto the target with wget, curl, certutil, PowerShell, or curl.exe. Flags, a modular cheat sheet, in-memory execution, upload-back with updog, checksum verification, and beating egress filters by serving on 80 or 443. https://solvere.app/tutorials/guides/file-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferpost-exploitationnetworkingwindowslinux https://solvere.app/tutorials/guides/file-transfer/ The file-transfer quick reference: the serve-and-pull vs push-and-receive decision, a modular copy-paste cheat sheet, and a worked breakdown of every method. Serve a folder over HTTP, pull with wget or certutil, host an SMB share, move a file with netcat or socat, copy over scp, paste a base64 blob, and checksum both ends. https://solvere.app/tutorials/guides/base64-transfer/ Fri, 19 Jun 2026 00:00:00 +0000 Solvere Labs file-transferlinuxwindowspost-exploitation https://solvere.app/tutorials/guides/base64-transfer/ The base64 file-transfer quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Encode a file to one pasteable line, decode it with a heredoc, move files with certutil or PowerShell on Windows, chunk a blob too long to paste, and checksum both ends to prove it arrived intact. https://solvere.app/ctfs/thm/carnage/ Thu, 18 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/carnage/ Today we are solving another Defensive Security challenge from TryHackMe called Carnage. In this challenge we are provided with a packet capture (PCAP) file from a real-world malwa https://solvere.app/ctfs/thm/breakoutthecage/ Thu, 18 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/breakoutthecage/ Today we are solving another TryHackMe machine called Break Out The Cage, a Linux-based challenge inspired by Nicolas Cage. The machine contains multiple stages including anonymous https://solvere.app/ctfs/thm/super-spammr/ Wed, 17 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/super-spammr/ The infamous cosmic hacker Super-spam has returned. Originating from the planet Alpha Solaris IV, Super-spam's mission is to eliminate Linux systems across the galaxy and replace t https://solvere.app/ctfs/thm/bypass-disable-functions/ Wed, 17 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/bypass-disable-functions/ This challenge focuses on bypassing PHP security restrictions, specifically the disablefunctions directive commonly configured in hardened PHP environments. https://solvere.app/ctfs/thm/tech-supp0rt/ Tue, 16 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/tech-supp0rt/ Today we are solving another TryHackMe machine named TechSupport. https://solvere.app/ctfs/thm/revil/ Tue, 16 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/revil/ One of the employees at Lockman Group reported that all of his files had suddenly been renamed with an unfamiliar extension. After a quick inspection, the IT department suspected r https://solvere.app/ctfs/thm/newhireoldartifacts/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/newhireoldartifacts/ We are working as a SOC Analyst for an MSSP called TryNotHackMe. https://solvere.app/ctfs/thm/jump/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/jump/ We are presented with a Linux machine that heavily relies on automation pipelines. https://solvere.app/ctfs/thm/develpy/ Mon, 15 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/develpy/ Today we are solving another TryHackMe machine named DevelPy. https://solvere.app/ctfs/thm/corridor/ Sun, 14 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/corridor/ Today we solved a very easy TryHackMe challenge focused on IDOR (Insecure Direct Object Reference). https://solvere.app/ctfs/thm/conti/ Sun, 14 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/conti/ Today we are investigating a ransomware incident involving Conti Ransomware, one of the most notorious Ransomware-as-a-Service (RaaS) operations. https://solvere.app/ctfs/thm/friday-overtime/ Sat, 13 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/friday-overtime/ It is a Friday evening at PandaProbe Intelligence when SwiftSpend Finance submits an urgent threat intelligence request. https://solvere.app/ctfs/thm/expose/ Sat, 13 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/expose/ The FTP server contained no useful files. https://solvere.app/ctfs/thm/ironshade/ Fri, 12 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/ironshade/ Based on threat intelligence reports, an APT group known as IronShade has been actively targeting Linux servers across the region. https://solvere.app/ctfs/thm/blueprint/ Fri, 12 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/blueprint/ As usual, we begin with a full port scan to identify exposed services. https://solvere.app/ctfs/thm/operation-coldstart/ Thu, 11 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/operation-coldstart/ Operation ColdStart is an easy Linux-based machine where our objective is to compromise the target, gain user access, and ultimately escalate privileges to root. https://solvere.app/ctfs/thm/cachemeoutside-challenge/ Thu, 11 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/cachemeoutside-challenge/ Years after leaving the hacking scene, a retired hacker has unintentionally left traces of his identity scattered across the public internet. https://solvere.app/ctfs/thm/itsybitsy/ Wed, 10 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/itsybitsy/ During routine SOC monitoring, Analyst John observed an IDS alert indicating potential Command and Control (C2) communication originating from a user named Browne in the HR departm https://solvere.app/ctfs/thm/ide/ Wed, 10 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/ide/ Additional HTTP service on a high port. https://solvere.app/ctfs/thm/operation-promotion/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thmwebcommand-injectionprivilege-escalationrcereverse-shellsqliapacheenum4linux https://solvere.app/ctfs/thm/operation-promotion/ You are up for promotion at Hadron Security. Your senior lead, Mara, has handed you a solo engagement against RecruitCorp, a small recruiting firm with a public-facing portal. https://solvere.app/ctfs/thm/light/ Tue, 09 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/light/ The room provides the following information:. https://solvere.app/ctfs/thm/whiterose/ Mon, 08 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/whiterose/ Only SSH and HTTP are exposed. https://solvere.app/ctfs/thm/monday-monitor/ Mon, 08 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/monday-monitor/ Swiftspend Finance, a fintech company, has recently deployed Wazuh and Sysmon to strengthen endpoint monitoring and improve threat detection capabilities. https://solvere.app/ctfs/thm/glitch/ Sun, 07 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/glitch/ At this point, web enumeration becomes the primary attack path. https://solvere.app/ctfs/thm/dreaming/ Sat, 06 Jun 2026 00:00:00 +0000 naval0505 thm https://solvere.app/ctfs/thm/dreaming/ Dreaming is a Linux-based machine that focuses on web enumeration, CMS assessment, credential discovery, database abuse, and privilege escalation through insecure permissions and s https://solvere.app/tutorials/guides/netexec/ Sat, 30 May 2026 00:00:00 +0000 Solvere Labs active-directorysmbenumerationwindowslinux https://solvere.app/tutorials/guides/netexec/ A practical NetExec guide: install it, verify it, enumerate one protocol at a time, validate credentials without locking accounts, read the output honestly, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/socat/ Fri, 29 May 2026 00:00:00 +0000 Solvere Labs networkinglinux https://solvere.app/tutorials/guides/socat/ The socat quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Verbose TCP client, port forward, UNIX-socket-to-TCP bridge, TLS wrap, hex-dump a protocol, upgrade a reverse shell to a full PTY, and a virtual serial pair. https://solvere.app/tutorials/guides/whois/ Thu, 28 May 2026 00:00:00 +0000 Solvere Labs osintrecondnslinux https://solvere.app/tutorials/guides/whois/ The whois quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Look up a domain, find who owns an IP, enumerate a netblock, pull name servers, read registration dates, query a registry directly, and route around a redacted or wrong-server answer with RDAP. https://solvere.app/tutorials/guides/wget/ Sun, 24 May 2026 00:00:00 +0000 Solvere Labs webnetworkinglinux https://solvere.app/tutorials/guides/wget/ The wget quick reference: install and verify, a modular copy-paste cheat sheet, and one command for every real situation. Resume a broken download, mirror a site for offline viewing, pull a list of URLs, reuse a login cookie, POST a form, and rate-limit to stay quiet. https://solvere.app/tutorials/guides/tshark/ Tue, 19 May 2026 00:00:00 +0000 Solvere Labs networkinglinux https://solvere.app/tutorials/guides/tshark/ The TShark quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Read a PCAP, filter by BPF or display syntax, extract clean fields, follow a TCP stream, pull cleartext creds, carve files out of HTTP, and spot a port scan. https://solvere.app/tutorials/guides/enum4linux-ng/ Mon, 18 May 2026 00:00:00 +0000 Solvere Labs smbenumerationwindowslinux https://solvere.app/tutorials/guides/enum4linux-ng/ The enum4linux-ng quick reference: the flags that matter, a modular copy-paste cheat sheet, and a worked breakdown of every real SMB and RPC situation. List shares anonymously, enumerate users and groups, dump the password policy, RID-cycle when direct enum is blocked, add credentials for depth, and export clean JSON or YAML. https://solvere.app/tutorials/guides/sqlmap/ Sat, 09 May 2026 00:00:00 +0000 Solvere Labs websqlisqlmaplinux https://solvere.app/tutorials/guides/sqlmap/ The sqlmap quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Confirm an injectable parameter, feed a saved Burp request, fingerprint the DBMS, walk the dbs/tables/columns ladder, dump only the columns you need, grab password hashes, evade a WAF with tamper scripts, and route through a proxy. https://solvere.app/tutorials/guides/nikto/ Wed, 06 May 2026 00:00:00 +0000 Solvere Labs webreconenumerationlinux https://solvere.app/tutorials/guides/nikto/ The Nikto quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real scan. Scan HTTP and HTTPS, hit odd ports, reach a vhost by Host header, tune out the noise, proxy through Burp, save a machine-readable report, and pull just the findings. https://solvere.app/tutorials/guides/dirsearch/ Mon, 04 May 2026 00:00:00 +0000 Solvere Labs webenumerationlinux https://solvere.app/tutorials/guides/dirsearch/ The dirsearch quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real content-discovery task. Pick a wordlist, append extensions, filter soft-404s by size, recurse into found directories, scan a list of hosts, save JSON, and proxy through Burp. https://solvere.app/tutorials/guides/dig/ Fri, 01 May 2026 00:00:00 +0000 Solvere Labs dnsreconenumerationlinux https://solvere.app/tutorials/guides/dig/ The dig quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Resolve A/AAAA, find MX and NS, read SPF and DMARC TXT, reverse-lookup an IP, query a specific resolver, trace delegation from the root, and test a zone transfer. https://solvere.app/tutorials/guides/john/ Wed, 29 Apr 2026 00:00:00 +0000 Solvere Labs brute-forcelinuxwindows https://solvere.app/tutorials/guides/john/ The John the Ripper quick reference: flags, a modular copy-paste cheat sheet, and a worked breakdown of every real situation. Identify a hash, convert a ZIP or SSH key with a *2john script, run wordlist and rule attacks, crack NT and sha512crypt, mask a known pattern, fork across CPU cores, and read the pot file honestly. https://solvere.app/tutorials/guides/ldapsearch/ Sun, 26 Apr 2026 00:00:00 +0000 Solvere Labs ldapactive-directoryenumerationwindowslinux https://solvere.app/tutorials/guides/ldapsearch/ The ldapsearch quick reference: the flags, a modular copy-paste cheat sheet, and a worked breakdown of every real task. Find the base DN from the Root DSE, bind anonymously or with credentials, list users and groups, enumerate computers, hunt Kerberoastable accounts, page past a size limit, and query over LDAPS. https://solvere.app/tutorials/guides/metasploit/ Sat, 25 Apr 2026 00:00:00 +0000 Solvere Labs reconlinuxwindows https://solvere.app/tutorials/guides/metasploit/ A practical Metasploit guide: install it, verify it, search modules, set options safely, validate findings with auxiliary checks, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/msfvenom/ Tue, 21 Apr 2026 00:00:00 +0000 Solvere Labs linuxwindows https://solvere.app/tutorials/guides/msfvenom/ A practical msfvenom guide: install it, verify it, pick a payload, set LHOST and LPORT, choose a format, generate controlled lab payloads, pair them with a handler, and keep a cheat sheet you will actually reuse. https://solvere.app/tutorials/guides/tcpdump/ Sat, 18 Apr 2026 00:00:00 +0000 Solvere Labs networkinglinux https://solvere.app/tutorials/guides/tcpdump/ The tcpdump quick reference: install and verify, the flags you actually use, a modular BPF cheat sheet, and one command per real situation. Isolate one host, watch a single service, catch DNS, filter by direction or protocol, read clear-text payload, save a clean PCAP for Wireshark, and rotate long captures unattended.