Welcome

Introduction

Welcome everyone to my 2023 SANS Holiday Hack Challange write-up based on Holiday Hack 2023 Challanges!.

There are 3 main sections. The page which contains introduction, answers and all extras found during this journey! Extras section contains Bonus and Easter eggs.

I had oportunity to create GPT Apps using ChatGPT which helped me out during investigations of phishing mails in Phish Detection Agency and AI Halucinations in Reportinator. Artificial intelligence proved instrumental in solving puzzles during various missions including Missile Diversion. ChatGPT was employed to develop code for automating fishing activities Bonus , utilizing WebSockets technology.

Destinations

This year we have been situated across sea encompassing five distinct islands.

Christmas Island

• Orientation
• Frosty's Beach
• Santa's Surf Shack
• Rudolph's Rest Resort
• Resort Lobby

Island of Misfit Toys

• Scaredy Kite Heights
• Ostrich Saloon
• Squarewheel Yard
• Tarnished Trove

Film Noir Island

• Chiaroscuro City
• Gumshoe Alley PI Office
• The Blacklight District

Pixel Island

• Rainraster Cliffs
• Driftbit Grotto

Steampunk Island

• Brass Bouy Port
• Coggoggle Marina
• Rusty Quay

Space Island

• Spaceport Point
• Cape Cosmic
• Zenith SGS

Answers

1. Holiday Hack Orientation -

answer

2. Snowball Fight -

window.player.body.height=1

3. Linux 101 -

Congratulations, you caught all the trolls and retrieved all the presents!

4. Reportinator -

Halucinations found in Report 3,6,9

5. Azure 101 -

Great, you did it all!

6. Luggage Lock -

42["message",{"Type":"Open","Success":"True","Token":{"hash":"63867c655eaa6469bb28a62688c4e1b7ec0c435ef8ee67d9cf24cac953b8148d","resourceId":"5353ac49-2534-4de6-b8ed-9ef09dd76289"},"PlayerId":"5353ac49-2534-4de6-b8ed-9ef09dd76289"}]

7. Linux PrivEsc -

santa

8. Faster Lock Combination -

Lock open

9. Game Cartridges: Vol 1 -

Fixed QR code

10. Game Cartridges: Vol 2 -

GL0RY

11. Game Cartridges: Vol 3 -

!tom+elf!

12. Na'an -

NAN

13. KQL Kraken Hunt -

Beware the Cube that Wombles

14. Phish Detection Agency -

["victor.davis@geeseislands.com","xavier.jones@geeseislands.com","steven.gray@geeseislands.com","laura.green@geeseislands.com","nancy@geeseislands.com","rachel.brown@geeseislands.com","ursula.morris@geeseislands.com","quincy.adams@geeseislands.com","michael.roberts@geeseislands.com","oliver.thomas@geeseislands.com"]

15. Hashcat -

IluvC4ndyC4nes!

16. Elf Hunt -

Score 75 points

17. Certificate SSHenanigans -

Gingerbread

18. The Captain's Comms -

10426:HZ, 1224L:MMDD, 1200:HHMM

19. Active Directory -

Now I shall be out of sight; So through the valley and over the height.' And he'll silently take his way.

20. Space Island Door Access Speaker -

Doors open

21. Camera Access -

Conquer Holiday Season!

22. Missile Diversion -

SQL Update completed.

Conclusion

Narrative

A tale of a yuletide trip
That started from a tropic port,
Aboard this tiny ship
Santa and his helpful elves
To Geese Islands did go
Continuing their merry work
O'er sand instead of snow
New this year: a shiny tool
The elves logged in with glee
What makes short work of many tasks?
It's ChatNPT. It's ChatNPT
From images to APIs
This AI made elves glad
But motivations were unknown
So was it good or bad?
Could it be that NPT
Was not from off-the-shelf?
Though we'll forgive and trust again
We'd found a naughty elf
This fancy AI tool of ours
With all our work remained
Not good or bad, our online friend
Just did as it was
Surely someone's taint must be
Upon our AI crutch
Yes indeed, this bold new
Bore Jack Frost's icy touch
Though all's returned to steady state
There's one thing that we know
We'll all be needed once again
When Santa's back on snow

Appreciation is extended to the entire team for their continued commitment to bringing fun challenges each year!