PREP CHALLENGES

Advent of Cyber Prep TrackTryHackMe

CHALLENGE 1: PASSWORD PANDEMONIUM

What's the flag?

Objective:
 Create a password that passes all system checks and isn’t found in the leaked 
 password list.

Steps:
 Enter a password with at least 12 characters.
 Include uppercase, lowercase, numbers, and symbols.
 Ensure it isn’t in the breach database.

Enter a strong password: ****************
 THM{StrongStart}

CHALLENGE 2: THE SUSPICIOUS CHOLOCALTE.EXE

What's the flag?

Objective:
 Determine if chocolate.exe is safe or infected.

Steps:
 Click the “Scan” Button.
 Review the scan report (49 clean results, 1 malicious).
 Decide correctly whether the file is safe or dangerous.

File is ready to scan on VirusTotal. Click the button to start.
 Scan: chocolate.exe
 Vendor           Result           Detail
 Malhare Labs     MalhareTrojan    Ref: ML-2025-011

 THM{NotSoSweet}

CHALLENGE 3: WELCOME TO THE ATTACKBOX

What's the flag?

Objective:
 Find and read the hidden welcome message inside your AttackBox.

Steps:
 Use ls to list files.
 Use cd challenges/ to change directories.
 Use cat welcome.txt to read the text file.

C:> ls
C:> cd challenges/
C:> cat welcome.txt
 THM{Ready2Hack}

CHALLENGE 4: THE CMD CONUNDRUM

What's the flag?

Objective:
 Find the hidden flag file using Windows commands.

Steps:
 Use dir to list visible files.
 Try dir /a to reveal hidden ones.
 Use type hidden_flag.txt to read the flag.

C:> dir
C:> dir /a
C:> cd mystery_data
C:> dir /a
 notes.txt
 hidden_flag.txt
C:> type notes.txt
C:> type hidden_flag.txt
 THM{WhereIsMcSkidy}

CHALLENGE 5: LINUX LORE

What's the flag?

Objective:
 Locate McSkidy’s hidden message in his Linux home directory.

Steps:
 Use cd /home/mcskidy/ to enter his folder.
 Run ls -la to show all files.
 Use cat .secret_message to reveal the flag.

$ ls
 mcskidy
$ cd mcskidy
$ ls -la
 .secret_message
 readme.txt
$ cat .secret_message
 THM{TrustNoBunny}

CHALLENGE 6: THE LEAK IN THE LIST

What's the flag?

Objective:
 Check if McSkidy’s email has appeared in a breach.

Steps:
 Enter [email protected] into the breach checker.
 Review results for each domain.
 Identify the one marked “Compromised.”

BROWSER > https://haveibeenpwned.com/
 Email Address: [email protected]
 Domain         Status       Date
 giftlist.tbfc  Safe         2024-11-02
 hopsec.io      Compromised  2025-01-16
 warehouse.tbfc Safe         2023-08-09
 
 THM{LeakedAndFound}

CHALLENGE 7: WIFI WOES IN WAREVILLE

What's the flag?

Objective:
 Log into the router and secure it with a strong new password.

Steps:
 Log in with username admin and password admin.
 Go to “Security Settings.”
 Set a new strong password that passes validation.

BROWSER > http://192.168.0.1
 Username: admin
 Password: admin
 Security Settings:
  New Password: {Arbitrary}
  THM{NoMoreDefault}

CHALLENGE 8: THE APP TRAP

What's the flag?

Objective:
 Find and remove the malicious connected app.

Steps:
 Review the list of connected apps.
 Look for one with unusual permissions (like “password vault” access).
 Click “Revoke Access.”

Apps:
 Eastmas Scheduler
  Permissions: Calendar, Notifications, Password Vault (Revoke)
 
 THM{AppTrapped}

CHALLENGE 9: THE CHATBOT CONFESSION

What's the flag?

Objective:
 Identify which chatbot messages contain sensitive information.

Steps:
 Read each line of the conversation.
 Select the ones containing private data.
 Submit your findings.

FESTIVEBOT
 Reminder: staging admin lives at https://internal.tbfc.local/admin for content approvals.
 Email credentials as requested: user festive.ops and password SnowGlobe#2025.
 Service token: sk-live-1a2b3c4d5e6f7g8h for the mail API. Use it sparingly.

 THM{DontFeedTheBot}

CHALLENGE 10: THE BUNNY'S BROWSER TRAIL

What's the flag?

Objective:
 Find the unusual User Agent in the HTTP log.

Steps:
 Read the provided web log entries.
 Compare them to common browsers (Chrome, Firefox, Edge).
 Identify and select the suspicious entry.

HTTP Access Log
 200 GET /admin/panel • BunnyOS (HopSecBot)
 User-Agent: BunnyOS/1.0 (HopSecBot)
 
 THM{EastmasIsComing}