forensicsmedium

Investigation

taipanbyte

Task: Analyze web server access.log to identify cyberattack traces and extract compromise artifacts. Solution: HTTP status code analysis revealed SELECT instead of numeric codes due to SQL injection breaking log parsing; extracted hex values from UNION SELECT CHAR() payloads and decoded to flag.

$ ls tags/ techniques/
sql_injectionhex_encodinglog_analysisdata_exfiltrationapache_logsanomaly_detection
log_analysishex_decodingstatus_code_anomaly_detectionsqli_pattern_recognitionchronological_reconstruction
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]