Hacktrace Ranges Rules of EngagementWriteup Dikunci Sementara (Anti-Spoil Policy)
Tantangan Joedway saat ini masih berstatus ACTIVE di platform Hacktrace Ranges. Sebagai profesional keamanan siber yang mematuhi etika dan integritas kompetisi, solusi teknis langkah-demi-langkah dan flag dienkripsi secara penuh hingga tantangan resmi berstatus Retired.
CONGRATULATIONS!!! You have just been hired as a Security Analyst at JDW Corp. However, there is no time for a celebration. On your very first day, you discover that the company's internal infrastructure has been compromised. Last week, a senior developer at JDW Corp was tasked with implementing a Single Sign-On (SSO) integration for a critical internal project. To speed up the process, the developer searched for a suitable library online and found an NPM package hosted on GitHub that appeared to be legitimate and perfect for the task. Without performing a thorough security audit, the developer cloned the repository and installed the package into the JDW Internal Project environment. Shortly after the installation, unusual network activity was detected, and sensitive data began leaking to an unknown external server.
Hacktrace Ranges adalah platform cyber range mutakhir berbasis web di Indonesia dengan 70+ lab skenario dunia nyata. Menyediakan lingkungan simulasi intensif untuk menguji ketahanan infrastruktur siber melalui pendekatan pengujian ofensif maupun investigasi insiden defensif.
Kategori Defensive di Hacktrace Ranges menguji kompetensi analis SOC dan investigator DFIR: analisis paket trafik jaringan (PCAP), memory dump triage (Volatility), packet inspection, investigasi log sistem, serta reverse engineering malware untuk mengidentifikasi IoC.
Fokus pada Digital Forensics & Incident Response (DFIR) dan Malware Analysis: merekonstruksi linimasa serangan pasca-kompromi, menganalisis muatan berbahaya, mendeteksi persistensi, serta mengekstrak Indicators of Compromise (IOC).
Kebijakan Anti-Spoil Policy dan etika profesional melarang publikasi walkthrough publik untuk lab/tantangan yang masih berstatus aktif (*active rotation*). Begitu tantangan dinyatakan Retired oleh platform, analisis teknis mendalam akan dipublikasikan secara otomatis!