Kinoco Hacker Hands-on security practice
All challenges In progress
General Skills Level 2 100 points

Log Analysis - Find the Intruder

Mission

/app/auth.log contains authentication logs. Detect suspicious activity: - Identify IP addresses with 10+ failed logins within 1 hour - Get the timestamp of the first failed login from that IP The timestamp is a hint for the flag. Log format: [YYYY-MM-DD HH:MM:SS] Failed login from IP_ADDRESS

#log-analysis#security#incident-response#awk

Clear it in 3 steps

Not started

  1. Start the environment

  2. Investigate the target

    Available after the environment starts

  3. Submit the flag