Skip to content

Latest commit

 

History

3 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 

Repository files navigation

Funnelweb

Welcome to Funnelweb, a mock cyber forensics investigation project designed to test and enhance skills in OSINT, cryptography, steganography, and web exploitation. This project takes participants on a journey to solve a murder mystery by piecing together clues and ultimately obtaining a confession from the killer.

Screenshot 2024-12-01 223510

Project Overview

The investigation is structured across four interconnected repositories, each hosting specific challenges. Participants will navigate through these repositories, solving challenges to uncover critical clues.

Repositories

  1. Funnelweb
    Hosts introductory OSINT practice exercises. These exercises familiarize participants with the tools and techniques needed to tackle the main challenges. Funnelweb also contains the final cryptography challenge.

  2. Icarus
    Contains OSINT challenges that involve investigating the social profiles of two fake victims. The clues gathered here provide insights into the killer's identity.

  3. Basilisk
    Focuses on steganography challenges. Successfully solving these challenges yields keys that unlock access to the next phase.

  4. Pinocchio
    A web application hosting an SQL injection challenge. Solving this challenge reveals critical information that links back to Funnelweb, where the final cryptography challenge awaits.

Project Flow

  1. Orientation (Funnelweb): Start by solving OSINT exercises to get familiar with the tools.
  2. Reconnaissance (Icarus): Investigate fake social profiles to gather clues about the killer.
  3. Unlocking Secrets (Basilisk): Solve steganography challenges to obtain keys.
  4. Data Breach (Pinnochio): Use SQL injection to extract crucial data.
  5. Final Countdown (Funnelweb): Crack the final cryptography hash to complete the investigation.

Technologies and Skills

  • OSINT: Open-source intelligence gathering and analysis.
  • Cryptography: Hash cracking and secure communication.
  • Steganography: Hidden data retrieval.
  • Web Exploitation: SQL injection and other web application vulnerabilities.

How to Get Started

  1. Clone this repository for an overview of the project:
    git clone https://github.com/mahir-b0/SAP-2024
  2. Follow the links above to access the individual repositories.
  3. Begin with Funnelweb for orientation and follow the project flow to complete the investigation.

About

A mock forensic investigation centred around solving challenges in OSINT, cryptography, web exploitation

Resources

Stars

0 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors