Welcome to Funnelweb, a mock cyber forensics investigation project designed to test and enhance skills in OSINT, cryptography, steganography, and web exploitation. This project takes participants on a journey to solve a murder mystery by piecing together clues and ultimately obtaining a confession from the killer.
The investigation is structured across four interconnected repositories, each hosting specific challenges. Participants will navigate through these repositories, solving challenges to uncover critical clues.
-
Funnelweb
Hosts introductory OSINT practice exercises. These exercises familiarize participants with the tools and techniques needed to tackle the main challenges. Funnelweb also contains the final cryptography challenge. -
Icarus
Contains OSINT challenges that involve investigating the social profiles of two fake victims. The clues gathered here provide insights into the killer's identity. -
Basilisk
Focuses on steganography challenges. Successfully solving these challenges yields keys that unlock access to the next phase. -
Pinocchio
A web application hosting an SQL injection challenge. Solving this challenge reveals critical information that links back to Funnelweb, where the final cryptography challenge awaits.
- Orientation (Funnelweb): Start by solving OSINT exercises to get familiar with the tools.
- Reconnaissance (Icarus): Investigate fake social profiles to gather clues about the killer.
- Unlocking Secrets (Basilisk): Solve steganography challenges to obtain keys.
- Data Breach (Pinnochio): Use SQL injection to extract crucial data.
- Final Countdown (Funnelweb): Crack the final cryptography hash to complete the investigation.
- OSINT: Open-source intelligence gathering and analysis.
- Cryptography: Hash cracking and secure communication.
- Steganography: Hidden data retrieval.
- Web Exploitation: SQL injection and other web application vulnerabilities.
- Clone this repository for an overview of the project:
git clone https://github.com/mahir-b0/SAP-2024
- Follow the links above to access the individual repositories.
- Begin with Funnelweb for orientation and follow the project flow to complete the investigation.
