[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSuxjk6GLrMwsvTapEbEbl6jrG3oC5iNMnFW3AyjiXi4":3,"$fPOZdEDtLnnDGF-GSM9q-YOFKV1frI5vSBS3dSHWlSIo":58},{"slug":4,"title":5,"summary":6,"category":7,"author":10,"image_url":16,"image_thumb_url":16,"published_at":17,"updated_at":18,"body_html":19,"keywords":20,"reading_time_minutes":21,"related_articles":22,"related_course":14,"related_specialty":14},"d3saf10-eset-obten-la-bandeja-y-tu-pase-para-ekoparty","D3SAF10 ESET - Obtén la bandeja y tu pase para ekoparty","El 28 de Agosto de 2017, a las 15:06, Omar de BacktrackAcademy me envía un enlace para participar y ganar una entrada a la EKOPARTY (Es un evento que se lleva cada año en Argentina – Buenos Aires que tiene una duración de  tres días, donde se presenta las investigaciones, lo interesante son los retos que se llevan a cabo los famosos CTF y el ambiente amigable de aprender y compartir la información.) el reto se basa en un Crackme  encontrar un Flag, o en castellano una Bandera, comenzamos.",{"slug":8,"name":9},"reverse-engineering","Ingeniería Inversa",{"username":11,"name":12,"avatar_url":13,"headline":14,"aboutme":15},"Lior","Rafael PeruCrackers","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdGdKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--18ea99d6876a18ae422b2c3858846ac9d9979bfa\u002F41473879_681300015589328_2914457510192611328_n.jpg",null,"Estudiante de la ingenieria Inversa usando las herramientas de Ollydbg y el actual IDA PRO, actualmente me encuentro investigando sobre Creacion de Exploit, con animo de ayudar a las personas que les interesa el mundo del reversing, :)","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBa2dPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--63f86fa735a561983458efb36517a7d4e54a97c9\u002Fshutterstock_690087028_(1).jpg","2017-09-19T23:22:48-03:00","2026-10-26T12:02:51-03:00","\u003Ch2>\u003Cspan>\u003Cspan>Historia\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fh2>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>El 28 de Agosto de 2017, a las 15:06, Omar de BacktrackAcademy me envía un enlace para participar y ganar una entrada a la \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fwww.ekoparty.org\u002F\">EKOPARTY\u003C\u002Fa>\u003C\u002Fstrong> (Es un evento que se lleva cada año en Argentina – Buenos Aires que tiene una duración de  tres días, donde se presenta las investigaciones, lo interesante son los retos que se llevan a cabo los famosos CTF y el ambiente amigable de aprender y compartir la información.) el reto se basa en un \u003Cstrong>Crackme\u003C\u002Fstrong>  encontrar un \u003Cstrong>Flag\u003C\u002Fstrong>, o en castellano una Bandera, comenzamos.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002F0TKMs788e7HE1S9GWA0_XmoWEqIuTLC_LIe3IrFlGiYogSmdhPm-Kt2SPln-lhzqOd5HRIYB8x890pwZdSfeEWjhsxZTwBPbURNciiwfT2HHaSOpFf6FJHGvaTQQoi19yuRb2FDq5F1d7-ScUw\" width=\"319\" height=\"308\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>Figura 1. Desafío de ESET (Famoso Antivirus NOD32)\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Ch3>\u003Cspan>\u003Cspan>Resolviendo el reto\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fh3>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Descargamos el reto y lo primer dato curioso es el tipo de formato \u003Cstrong>.docm\u003C\u002Fstrong>, este nuevo formato hace referencia a que contiene macros incrustados que se puede utilizar como documento de archivo. Ver Figura 2.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FSxKJaZWsineM6M_zAczY7_biHj4pCsyJMsrj8KgfxlnUl-QsdXlkGh_Qbk0hgZS5zFrXJu-QmK4nai6AnFe7XuEnf9PatB0Pa7hpoOQgukIyhVw8rNCrJw9qooDb3hOsSSQnpNo3uUu6x8wG6w\" width=\"136\" height=\"40\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cp>Figura 2. El tipo de formato.\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>Al abrir el documento, debemos obtener información del reto, recuerde que el formato contiene macro, para ellos debemos ir a la pestaña Vista, luego clic en Macros -&gt; ver macros. , Luego clic en Paso a paso. Ver Fi\u003C\u002Fspan>\u003Cspan>gura 3. \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FGyEnsuQE2LGHpS9UKXtz2e8s2wBoGy8JyIHeAbNo_Q572wzLELYgcWtRtnLDvbOP61cdrT3HOxTmLU6bAB23geNFA5RpkZQNROwaUiaNuBOgye9rv7qasFa3VVdzqHW0gd1XYOvVANQkqiA0dw\" width=\"507\" height=\"201\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 3. Los pasos que debemos seguir.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Observaremos que nos abre la ventana de Microsoft Visual Basic, además nos muestra el código\u003C\u002Fspan>\u003Cspan> de la Macro llamado downloader. Ver \u003C\u002Fspan>\u003Cspan>Figura 4.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002FMNVFQRgSQpZb_yJLytHgGd3GktexLPhV7b4kJ5xx97Dh2m6otyhMMB1pwcgFEpjljnCjgCGiqBYZgMu7gwR5gJfjMEn_aMtC1RcWmEXQzLfr1FEh_a_OroyAK_83bG0MhLeiGmf7yvq4_AfgVw\" width=\"337\" height=\"180\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Figura 4. Nos muestra el código\u003C\u002Fspan>\u003Cspan> a descifrar. \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>En esta parte analizaremos cada función llamado Cifrado:\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>En la función Cifrado1, se observa el código hexadecimal, la idea es convertir a código ASCII. Ver \u003C\u002Fspan>\u003Cspan>Figura 5.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002FQsdESsYJoMWzQu9L2676rn6rycDJdL4R6P4IieL5Ui6C6-z8CUPOdzQfA7wzcqfMDpxVVb-vDAQRfqr-M9rXmUCNwVu343ojNZdwcyNfRa97rQ1Dh7ypcKJxgoGXKjHpsLZ7-YcTHYwxSyc-kQ\" width=\"434\" height=\"127\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>Figura 5. El cuadro amarillo muestra el hexadecimal.\u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>La Conversión nos muestra “piz.53_TESE_01FAS3D”. Ver \u003C\u002Fspan>\u003Cspan>Figura 6.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002FVV7GOllHAsO3PO_qYeDJzedLjKuJcK9HQdXncTki8K8fUBjFnLcsnxACekvOfquSiruyu5xja1_cm00Q9DrgzYBODtYZaaif_4wwe6Rr3pZ36AmTCiGbn7ispZHJv4fg8g965Hy6pEUeQ5Iqug\" width=\"280\" height=\"132\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cdiv>Figura 5. La conversión ASCII, \u003C\u002Fdiv>\r\n\u003Cdiv>\n\u003Ca href=\"http:\u002F\u002Fwww.rapidtables.com\u002Fconvert\u002Fnumber\u002Fhex-to-ascii.htm\">Hex to ascii\u003C\u002Fa>\u003Cspan>\u003C\u002Fspan>\n\u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>En la función Cifrado 2, se observa el código binario, debemos realizar la conversión a ASCII. Ver \u003C\u002Fspan>\u003Cspan>Figura 6.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002FgBbcM2fX2dE5kVf4v2SX0PosNczhYw3H70q5BHatFmMPYlXHzYPepfAd1PaYYzJydrRazcjhEVtgS0lK01E3csQna1h2pFh_EX23Zo88B3uQvAuqIjYQ7UhUkDoY3VzDvkOVwjLuj6ij9yE8dQ\" width=\"402\" height=\"116\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cp>Figura 6. El cuadro amarillo muestra el binario.\u003C\u002Fp>\r\n\u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>La conversión nos muestra: “\u003C\u002Fspan>\u003Cspan>\u002F80\u002F7102\u003C\u002Fspan>\u003Cspan>”. Ver Figura 7.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FexJwoyDzJDFZZoUEogDCJS9CguDIX22Aj9_j78Uuvk9Ajlc_ho8YMnM8f1grzaG2vvHN78R5vCA0szbQiR2mI2o5tlz4ynD2Ddud-oF_rTuux74EEDMvO1NLUkGrciD57UeYz42O_-0P9jz-qA\" width=\"391\" height=\"41\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cdiv>Figura 7. La conversión a ASCII\u003C\u002Fdiv>\r\n\u003Cdiv>\n\u003Ca href=\"http:\u002F\u002Fbinario.cf\u002Findex.php\">Binario a ASCII\u003C\u002Fa>\u003Cspan>\u003C\u002Fspan>\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cspan>\u003C\u002Fspan>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>En la  función Cifrado 3, se observa el código Base64, debemos realizar la conversión a ASCII. Ver \u003C\u002Fspan>\u003Cspan>Figura 8.\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002FzLyuIgm2xaS-dX6djXdwEzqTDLBvOgx_WO0-y-JpcFuj9gBczjbW7QFS0mh2ISpgmkixkY2nNpJnrg4DGWhZgx9-r5rIdebcHtVFZlDFmfqCSgUGbQHeE0fr7S-aR9fnNLN3yJ_4WYfuzUh4yQ\" width=\"401\" height=\"117\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 8. El cuadro amarillo muestra Base64.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>La conversión muestra: “\u002Fsdaolpu\u002Ftnetnoc-pw”. Ver Figura 9.\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002F2t5aqFW0WdnD-AWZfYUK39zK32nf2JgBhQ0XzB-VZ5dLicCnt73-NKuluU2mGc7gMDnORnVHfRDolMpQskqzfc__uq-jkk0zcOyRc1o1HRM4vk2IBxU1lDSEDtvcB6L4FXog7sUgsMiP4Y6FSw\" width=\"268\" height=\"88\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Figura 9. Nos muestra el Código\u003C\u002Fspan>\u003Cspan> ASCII\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv>\n\u003Ca href=\"https:\u002F\u002Fwww.base64decode.org\u002F\">Base 64 decode\u003C\u002Fa>\u003Cspan>\u003Cspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\n\u003C\u002Fdiv>\r\n\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cspan>\u003C\u002Fspan>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>En la función Cifrado 4, se observa el código decimal, como siempre realizar la conversión ASCII. Ver \u003C\u002Fspan>\u003Cspan>Figura 10.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003C\u002Fdiv>\r\n\u003C\u002Fdiv>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002Fyb-VM5m5E29smIstww-ALyTWZwC5lEtcrXWhZr0kVBkYLG40NViRnSUyX4p6Xb01dl1rxa02cTWMaaX76lcaSNxHb-0E2eshbgV6VA_Nk8UGEdkBDEsJWSPE88gv4AYmMs9NXhdreQCS4-uIBA\" width=\"355\" height=\"111\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 10. El cuadro amarillo muestra el decimal.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>La conversión muestra: “\u002Fmoc.ytirucesevilew.www”. Ver Figura 11.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FIbf3ux_ExrLp_tWzRr_WHCAyHYl7z-0YkLPu3aJRLd2TQ9T_b85bV24ZhjAp5MkFKEM6WdOwKAYBDRjv7b58YHrcdzz7QPi9P-6TBbTzVL8mz5NJi60eBXOTGxzFTTTATMTNm-DCNkYgqa1mwQ\" width=\"199\" height=\"160\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 11. Nos muestra códi\u003C\u002Fspan>\u003Cspan>g\u003C\u002Fspan>\u003Cspan>o ASCII\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fwww.rapidtables.com\u002Fconvert\u002Fnumber\u002Fascii-hex-bin-dec-converter.htm\">ASCII To HEX\u003C\u002Fa>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>En la función Cifrado5, se url Encodin\u003C\u002Fspan>\u003Cspan>g, debemos convertir ASCII. Ver \u003C\u002Fspan>\u003Cspan>Figura 12.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002F2xEsfUCfA9-eL5Gmv09uacv33eOR7HxGxLASOj_AU9N0BG42x73O3Fk1QdY21XiQBdmtuF9hOOeiKfL5O15kZeH9P0eXHRcLJ9ESq2plR9AjXtZZFfL4-D21_36icou-2E6gSVJE4afXPhJh7Q\" width=\"423\" height=\"117\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>Figura 12. El cuadro Amarillo nos muestra \u003Cstrong>URL Encodin\u003C\u002Fstrong>\u003C\u002Fspan>\u003Cspan>\u003Cstrong>g\u003C\u002Fstrong>.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>La conversión muestra: “\u002F\u002F:sptth”, Ver \u003C\u002Fspan>\u003Cspan>Figura 13.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002F53qsXmLfg5vneS6CzUAqV9HIZlEd4V2NUiJpjAPKrnRTtPvJ-KjNaClsZryzMuvO5DsKZYLOUKRGsAwLFfSUg7fb3I1Be3L_PbCQViHZ_w3ylnt97Z_5Qb77eqcc_wM6a1-t2Jm2G5ZTKtciDw\" width=\"212\" height=\"188\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>Figura 13. Nos muestra decodificado.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003C\u002Fdiv>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Ch4>Decodificando el URL escondido\u003C\u002Fh4>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>Finalmente observamos que cada función se encuentra al revés, veamos cada uno:\u003C\u002Fp>\r\n\u003C\u002Fdiv>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Function Cifrado1() : piz.53_TESE_01FAS3D - &gt; D3SAF10_ESET_35.zip\u003C\u002Fspan>\u003Cspan>\u003Cbr class=\"kix-line-break\">\u003C\u002Fspan>\u003Cspan>Function Cifrado2() : \u002F80\u002F7102 - &gt; 2017\u002F08\u002F\u003C\u002Fspan>\u003Cspan>\u003Cbr class=\"kix-line-break\">\u003C\u002Fspan>\u003Cspan>Function Cifrado3() :  \u002Fsdaolpu\u002Ftnetnoc-pw - &gt; wp-content\u002Fuploads\u002F\u003C\u002Fspan>\u003Cspan>\u003Cbr class=\"kix-line-break\">\u003C\u002Fspan>\u003Cspan>Function Cifrado4() : \u002Fmoc.ytirucesevilew.www - &gt; www.welivesecurity.com\u002F\u003C\u002Fspan>\u003Cspan>\u003Cbr class=\"kix-line-break\">\u003C\u002Fspan>\u003Cspan>Function Cifrado5() : \u002F\u002F:sptth - &gt; https:\u002F\u002F\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Debemos unir todas las funciones resueltas: Cifrado5+ Cifrado4+ Cifrado3+ Cifrado2+ Cifrado1\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Ca href=\"https:\u002F\u002Fwww.welivesecurity.com\u002Fwp-content\u002Fuploads\u002F2017\u002F08\u002FD3SAF10_ESET_35.zip\">\u003Cspan>https:\u002F\u002Fwww.welivesecurity.com\u002Fwp-content\u002Fuploads\u002F2017\u002F08\u002FD3SAF10_ESET_35.zip\u003C\u002Fspan>\u003C\u002Fa>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Lo descargamos y trataremos de descomprimir el archivo, no sabemos la clave, por lo tanto debemos buscar la clave para descomprimir. Ver \u003C\u002Fspan>\u003Cspan>Figura 14.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FlXeHvqK9yWoWMb59dcvmbPFhhfGJXRRQc7J-Q8709t3ezbk3jum2DmOlEVUWqt9wWRY1O_iw1iUwBWAJVbU_O8QvN_YmYlCRTlYLcKXa8xTaiR5BojOy20L81rX8RqXiM-yVxl_uRJnQ3tDn7A\" width=\"309\" height=\"192\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>Figura 14. Se descargar y descomprime, debemos obtener la clave correcta. \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Buscaremos la clave en el documento, para ello debemos Inspeccionar documento. Ver \u003C\u002Fspan>\u003Cspan>Figura 15\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002Fv16zMk_fjQ02BQM0hOEB00tR344XU1OmLTSZ1tRHm-r-GvRLEI3cLufIKV3LqWed6cwgk8ymsQEeZoKnUxbif3BT03nwIydNz_nf8NeYhiXSSLIEYS4MJYoe9sd7QesIfCAyrbA8ELb1V-LkZg\" width=\"233\" height=\"221\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 15. Los pasos para inspeccionar el documento.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>Como resultado nos mostrará que tenemos un Encabezado, pie de página\u003C\u002Fspan>\u003Cspan> y marcas de agua, Ver \u003C\u002Fspan>\u003Cspan>Figura 16.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002FuhBo9y4GQzYRv_eAku-89CuzRBl60zZrZoFDEkX_pvmVQf-Wqa-J8WFf5JpHCWlGh-f5FK1zgEHldLyXw4JCFYzl54tifmxZsH5qfj3ltRZEMwu12jxlbFPNWavMNt7ABeqv0TZSoFoIkU7MBQ\" width=\"232\" height=\"210\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 16. Nos muestra Pie de Página.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>En pie de página aparentemente no se encuentra ningún tipo de información, pero tratemos de seleccionar toda el área. Figura 17.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FRH2E32lAnHxtjV-qyvpW_-wRKhj3Te8cNJXBhuCGObzWhyI7iqh4uT9oZI-VwA_sop12eV2iKcfoEky8RqsBI2Zk6pvi94gD612DgFz0okGErOdrxuP1nidNcGwtb0DfwzQjCCUtFKQu2m8OQw\" width=\"444\" height=\"68\">\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 17. Nos muestra en blanco la supuesta clave.\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Trataremos de cambiar de color para tener visibilidad del texto e identificar qué tipo de códi\u003C\u002Fspan>\u003Cspan>g\u003C\u002Fspan>\u003Cspan>o es: Ver Figura 18.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FdbSyHaUJAbVULAqKCySm2oPXqFD1iOaRJIfKmHTztaxtlJ4t_AuGHYyt8G3kZbdMEFPWcJ-yn_3NfL5TO1vs2wS4JUKEmAyi9W47cU8wdfvDutf1pcR7pbdySrr9IbLuQP5kQRyIEHuHbrLLgA\" width=\"439\" height=\"106\">\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 18. Observamos el Código Base64.\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Pasemos a decodificar aW5mZWN0ZWQzNQ== a ASCII: \u003Cstrong>infected35\u003C\u002Fstrong>, luego pasemos a descomprimir el reto con la clave: “\u003C\u002Fspan>\u003Cspan>\u003Cstrong>infected35\u003C\u002Fstrong>”. Ver \u003C\u002Fspan>\u003Cspan>Figura 19.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002F5szDaqfVq_bXCo0y9MzCablfDUTsi3VNhVfUV5WqfeydKcYjaS2Nn4MGinIJew-hOLMEPDtAYlG1906-XEU39UQECBNi73xJhcR4CRnatVh9z-9X-lL4--2ThEf9ht9EtCUxl-hhRvJi7a27rQ\" width=\"342\" height=\"211\">\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>Figura 19. Descomprimiendo con la clave obtenida.\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv>\n\u003Cspan>Finalmente obtuvimos el Crackme, para obtener la bandera, el proceso de obtener el reto fue laborioso, pero posible. Ver \u003C\u002Fspan>\u003Cspan>Figura 20.\u003C\u002Fspan>\n\u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002Fo82sk1ODcg_hoNifBss54H0QyIw3R9Z6Hwsg23h_QG-JVVLhsb4YgLl_1EaEOzKdermhOIBs8xeKGZ_grYvGJP_QgaluN0EyUVv3f13ejonz_c6I_WbgdmuISem-ijnxzoGCxlJAj96qrg45hQ\" width=\"329\" height=\"261\">\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cspan>Figura 20, Ejecutamos el Reto para obtener la bandera.\u003C\u002Fspan>\u003C\u002Fspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>En el próximo capítulo veremos la forma de obtener la bandera, es el tema más difícil ya que se  encuentra ofuscado, \u003C\u002Fspan>\u003Cspan>gracias a al team CracksLatinos 2017, PeruCrackers y Entre Ami\u003C\u002Fspan>\u003Cspan>gos CLS, especialmente a los Maestros \u003C\u002Fspan>\u003Cspan>Davicorm, Sr. Apuromafo y Nox.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>","Reversing, ekoparty",4,[23,35,46],{"slug":24,"title":25,"summary":26,"category":27,"author":28,"image_url":32,"image_thumb_url":32,"published_at":33,"updated_at":34},"inteligencia-de-amenazas-ciberneticas-con-ibm-x-force-exchange","Inteligencia de Amenazas Cibernéticas con IBM X-FORCE EXCHANGE","La inteligencia de amenazas ciberneticas tiene muchas aristas, y se deben utilizar muchas herramientas para tomar un veredicto en relación a una dirección ip o url , que se encuentra generando trafico hasta nuestro sitio web.",{"slug":8,"name":9},{"username":29,"name":30,"avatar_url":31},"user-1543237612","Cristian Jose Acuña  Ramirez","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaUFQIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--c84d5840f618ed711f6d776d0a8e54daa3f13bbe\u002F6e76f75b-b5b8-49f8-8b6a-73d757ad7c65.jpg","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdDhPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--8bae43d6642cf508a945274c83140364f49adc3d\u002Fshutterstock_1712503435.jpg","2020-09-04T11:38:43-04:00","2026-10-26T19:14:12-03:00",{"slug":36,"title":37,"summary":38,"category":39,"author":40,"image_url":43,"image_thumb_url":43,"published_at":44,"updated_at":45},"simple-reverse-icmp-shell","Simple reverse ICMP Shell","Planteando el escenario para ejecutar nuestra revershell, tenemos un equipo al que ya tenemos acceso con un usuario que nos permitirá la ejecución del Reverse shell ICMP en powershell.",{"slug":8,"name":9},{"username":41,"name":42,"avatar_url":14},"elzerpineda","Elzer Pineda","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdlFPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f839aa72cf39bd28065fd4b33680a238fc0ee42a\u002Fshutterstock_1382645309.jpg","2020-07-20T13:14:51-04:00","2026-10-26T12:22:02-03:00",{"slug":47,"title":48,"summary":49,"category":50,"author":51,"image_url":55,"image_thumb_url":55,"published_at":56,"updated_at":57},"4chan-y-nido-org-conoce-que-es-un-imageboard-o-tablon-de-imagenes","4chan y nido.org - Conoce todo sobre los Imageboard o tablón de imágenes.","La historia de los foros o tablón de imágenes (También conocidos en inglés como imageboard) data de 1999, cuando se creó el imageboard anónimo 2channel (2ch), este es un popular foro de imágenes creado en Japón con el objetivo de discutir sobre cómics japoneses y animé.",{"slug":8,"name":9},{"username":52,"name":53,"avatar_url":54},"pmcguirec","Paola Mc Guire Cancino","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbHNTIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--2bf31b5bf5b3e51e57bd3d83fc5b3c84e336e11d\u002FIMG_4294-3.jpg","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBckFPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--5da25444100f4afc83fe2109fbecaa01d27cc8b0\u002FPost192_NN1.png","2019-02-26T21:57:26-03:00","2026-10-26T10:39:47-03:00",{"levels":59,"specialties":72,"categories":89,"instructors":122,"article_categories":160,"article_authors":189,"discussion_categories":302},[60,64,68],{"slug":61,"name":62,"courses_count":63},"basicos","Basicos",15,{"slug":65,"name":66,"courses_count":67},"intermedios","Intermedios",28,{"slug":69,"name":70,"courses_count":71},"avanzados","Avanzados",16,[73,77,81,85],{"slug":74,"name":75,"courses_count":76},"enterprise-pentesting-training-ept","Penetration Testing Student",5,{"slug":78,"name":79,"courses_count":80},"penetration-testing-and-ethical-hacking-pthh","Penetration Testing Professional",7,{"slug":82,"name":83,"courses_count":84},"web-application-testing-wat","Web Application Testing",12,{"slug":86,"name":87,"courses_count":88},"information-security-training-ist","Information Security Analyst",6,[90,94,97,100,103,106,109,113,116,119],{"slug":91,"name":92,"courses_count":93},"administracion-de-servidores","Administración de Servidores",1,{"slug":95,"name":96,"courses_count":93},"vulnerability-analysis","Análisis de Vulnerabilidades",{"slug":98,"name":99,"courses_count":21},"auditoria-de-redes","Auditoría de Redes Informáticas",{"slug":101,"name":102,"courses_count":88},"auditorias-wireless","Auditorías Wireless",{"slug":104,"name":105,"courses_count":76},"forense","Forense ",{"slug":107,"name":108,"courses_count":84},"pentesting","Pentesting ",{"slug":110,"name":111,"courses_count":112},"pentesting-mobile","Pentesting a Aplicaciones Móviles",2,{"slug":114,"name":115,"courses_count":84},"auditoria-aplicaciones-web","Pentesting a Aplicaciones Web",{"slug":117,"name":118,"courses_count":21},"programacion","Programación",{"slug":120,"name":121,"courses_count":84},"seguridad-informacion","Seguridad de la información",[123,127,131,134,137,140,143,145,148,151,154,157],{"username":124,"name":125,"courses_count":126},"misaelban","Misael Banales",21,{"username":128,"name":129,"courses_count":130},"Sheyla_Leacock","Sheyla Leacock",8,{"username":132,"name":133,"courses_count":80},"Rodolfo","Rodolfo Cecena",{"username":135,"name":136,"courses_count":88},"ggomez","Gianncarlo Gómez",{"username":138,"name":139,"courses_count":76},"yulytas","Julita Inca",{"username":141,"name":142,"courses_count":21},"pacopadilcyber","Juan Francisco Padilla Suaste",{"username":29,"name":30,"courses_count":144},3,{"username":146,"name":147,"courses_count":93},"user-22500","Ignacio Benedini",{"username":149,"name":150,"courses_count":93},"magdielgutierrez","Magdiel Gutierrez",{"username":152,"name":153,"courses_count":93},"Mroodriguezb","Mario Rodriguez Barraza",{"username":155,"name":156,"courses_count":93},"coldd","Martin Frias",{"username":158,"name":159,"courses_count":93},"Omar_veliz","Omar Jacobo Muñoz Veliz",[161,162,164,168,170,171,174,175,177,179,180,182,184,187],{"slug":91,"name":92,"articles_count":84},{"slug":95,"name":96,"articles_count":163},9,{"slug":165,"name":166,"articles_count":167},"wireless-attacks","Ataque al Protocolo Wireless",11,{"slug":98,"name":99,"articles_count":169},13,{"slug":101,"name":102,"articles_count":144},{"slug":172,"name":173,"articles_count":112},"exploitation-tools","Explotación de Vulnerabilidades",{"slug":104,"name":105,"articles_count":163},{"slug":8,"name":9,"articles_count":176},26,{"slug":107,"name":108,"articles_count":178},99,{"slug":110,"name":111,"articles_count":163},{"slug":114,"name":115,"articles_count":181},33,{"slug":117,"name":118,"articles_count":183},27,{"slug":185,"name":186,"articles_count":167},"information-gathering","Recolección de Información",{"slug":120,"name":121,"articles_count":188},18,[190,193,196,201,202,207,211,212,216,217,219,223,227,228,232,235,236,239,243,247,251,255,257,261,264,268,272,276,279,281,285,288,291,294,298],{"username":158,"name":159,"avatar_url":191,"articles_count":192},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdmdGIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--de6eb458d07377fb9d25e6ed92e1917f274c8cdb\u002Fprofile.jpg",70,{"username":124,"name":125,"avatar_url":194,"articles_count":195},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBam9HIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--fcb46747ff2b0df3099425d0012f4da090b1db67\u002FIMG_2344.PNG",32,{"username":197,"name":198,"avatar_url":199,"articles_count":200},"saamux","Samuel Esteban","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbDRJIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--6e60a39152819c1c857e0a1e157e99a5fe76ddf9\u002Fperfil.png",30,{"username":11,"name":12,"avatar_url":13,"articles_count":176},{"username":203,"name":204,"avatar_url":205,"articles_count":206},"Felipe","Felipe Barrios","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBalVGIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--75c29db071130db1bdbb64cb6ed6b4b0767c7178\u002F12063705_10207273024561428_59106377850244238_n.jpg",17,{"username":208,"name":209,"avatar_url":210,"articles_count":71},"user-1582119990","José Moreno","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBczhMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--695dbd13093235a9632272a6a98b0c9ef21a0319\u002FJoseMoreno-300x180.jpg",{"username":29,"name":30,"avatar_url":31,"articles_count":167},{"username":213,"name":214,"avatar_url":215,"articles_count":167},"__script1an__","Cristian Palma P","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBc1lKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f168fca2e13ca6bb4a0629e2e6a46fc45622c54b\u002FLOGO-URI-SPIONI-MH-1.png",{"username":155,"name":156,"avatar_url":14,"articles_count":80},{"username":128,"name":129,"avatar_url":218,"articles_count":88},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBb29TIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--33711e0178d99dfd591d736d16027b251892ab2e\u002F20210721_132408(2).jpg",{"username":220,"name":221,"avatar_url":222,"articles_count":76},"JediCanosa","Alejandro Canosa Ferreiro","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBclVKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--9b0815c79e7690293117c5cf747d0d9889fd678e\u002F252860.jpg",{"username":224,"name":225,"avatar_url":226,"articles_count":76},"CrisMc","Cristian Mc Guire","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbThLIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ecd57b96e2e835d362d2d416b40f531b9752ffbe\u002FIMG-20171010-WA0000.jpg",{"username":41,"name":42,"avatar_url":14,"articles_count":76},{"username":229,"name":230,"avatar_url":231,"articles_count":144},"Funpunch","Andres Galeano","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbThGIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--e169c1f44d47457dda7935fcd906ce67cf324bbe\u002Ffoto.jpg",{"username":233,"name":233,"avatar_url":234,"articles_count":144},"Pablo Olivares","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdTRHIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--256f815e15650ad7609a7264df2d0c69742d870c\u002Fmetasploit.png",{"username":52,"name":53,"avatar_url":54,"articles_count":144},{"username":237,"name":238,"avatar_url":14,"articles_count":112},"D4RK0P","Alejandro Rivera",{"username":240,"name":241,"avatar_url":242,"articles_count":112},"user-1529427208","Arturo Ocampo","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBZzBMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--5c0000472cdff7e7771f11070fa1e865142cc9a9\u002F8c9610617-codsalestease.nbcnews-ux-2880-1000.jpg",{"username":244,"name":245,"avatar_url":246,"articles_count":112},"CannibaL","Cannibal .","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBZ2NMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ae676f2a7e452c690824c196a556de0fd878d091\u002FGatoRison.jpg",{"username":248,"name":249,"avatar_url":250,"articles_count":112},"Erik172","Erik Garcia","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBc1lSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--e703ff6245d2a783835ef18906375a5246ad1b84\u002Fgorickyourself.png",{"username":252,"name":253,"avatar_url":254,"articles_count":112},"damch","Javier Candia","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBam9KIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--036416498d87c59fa3f0ac1f5e0a08336b65faf5\u002Fdescarga.png",{"username":152,"name":153,"avatar_url":256,"articles_count":112},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBb1FSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--d5c1cf9e6152977482e3d8a919cee58dc745a65c\u002Fimage_6483441.JPG",{"username":258,"name":259,"avatar_url":260,"articles_count":112},"user-1522264539","Sebastian Veliz","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdW9LIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--8b572ca805a6e429859050c0eb0f9270a06aad7f\u002F28428972_394770877650233_1145374104606474240_n.jpg",{"username":262,"name":262,"avatar_url":263,"articles_count":112},"user-1609041409","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaklNIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--536c91898c7c42c0a3008d37ec317309cb9805cc\u002F9178eae767eec8ff5750bd9a1cfdfe3b.png",{"username":265,"name":266,"avatar_url":267,"articles_count":93},"819215531446900","Alvaro Alexander Palacios Carrillo","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaE1MIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--bd76f66adfaf8c1175ba43bb480eae08d23db24e\u002Ffoto.jpg",{"username":269,"name":270,"avatar_url":271,"articles_count":93},"gbrayhan","Brayhan Alejandro Gabriel Guerrero","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBamtKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--e0e7cb50ebcfa80db9c0882df1e3f476c487a572\u002FalexPerfil.jpg",{"username":273,"name":274,"avatar_url":275,"articles_count":93},"els","Estevenson Luis Solano","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbFlMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ac9a04550c2d3b3de33177e3dedd6116ff7bd898\u002Fdownload12.png",{"username":277,"name":278,"avatar_url":14,"articles_count":93},"user-1570553853","Flavio Esteban Canales Salvo",{"username":135,"name":136,"avatar_url":280,"articles_count":93},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaW9IIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--a8a4afb1bc1cbf26867aa952a95ccfa68dd4b198\u002FImagen_1.png",{"username":282,"name":283,"avatar_url":284,"articles_count":93},"uservzk80","Israel Pérez","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbmdJIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f26a75b81bb7939355f4181925e7886394bfa1ea\u002FPwtZlZxn.jpg",{"username":286,"name":287,"avatar_url":14,"articles_count":93},"jongo","Jonathan González",{"username":289,"name":290,"avatar_url":14,"articles_count":93},"K1!!","José Guzmán",{"username":292,"name":293,"avatar_url":14,"articles_count":93},"garciaguirre","Moises Garciaguirre",{"username":295,"name":296,"avatar_url":297,"articles_count":93},"user-1571024443","Romario Miranda Paternina","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBcXdMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--beccfc05028736f1068a40f35597ead611aef1f0\u002FIMG_20190910_145049285-01.jpeg",{"username":299,"name":300,"avatar_url":301,"articles_count":93},"shadebax","SHADE BAX","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBamtMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f59427b74236cfeb0c9c9f4b4d81bb898ce435a4\u002FHacker-icon.png",[303,304,305,306,308,310,311,312,313,315,316,318,320,321],{"slug":91,"name":92,"discussions_count":71},{"slug":95,"name":96,"discussions_count":167},{"slug":165,"name":166,"discussions_count":76},{"slug":98,"name":99,"discussions_count":307},25,{"slug":101,"name":102,"discussions_count":309},20,{"slug":172,"name":173,"discussions_count":71},{"slug":104,"name":105,"discussions_count":76},{"slug":8,"name":9,"discussions_count":144},{"slug":107,"name":108,"discussions_count":314},121,{"slug":110,"name":111,"discussions_count":188},{"slug":114,"name":115,"discussions_count":317},67,{"slug":117,"name":118,"discussions_count":319},40,{"slug":185,"name":186,"discussions_count":63},{"slug":120,"name":121,"discussions_count":322},55]