error with websocket

[ankanani]

Hi I am getting this error on execution:

ubuntu:~/Documents/GitHub/santas_little_helper$ python3 santas_little_helper.py
Traceback (most recent call last):
  File "santas_little_helper.py", line 33, in <module>
    ws = websocket.WebSocket(sslopt={"cert_reqs": ssl.CERT_NONE})
TypeError: __init__() got an unexpected keyword argument 'sslopt'

Any idea how to fix this?
Thanks
AK

[pollev]

Hello!

It seems like you are missing the correct websocket dependency.
Please run

python3 -m pip install websocket_client

I will add this to the readme as well.

[ankanani]

thank you Polle! The script is executing now. However, tt seems Kringlecon server is dead at the moment, so cannot try it fully though. Will let you know if i face any more issues. Regards

…

On Mon, Dec 23, 2019 at 12:06 PM Polle Vanhoof ***@***.***> wrote: Closed #1 <#1>. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#1?email_source=notifications&email_token=ABWHFODHHKMVTF3NNS7XVVDQ2BL7PA5CNFSM4J6O26QKYY3PNVWWK3TUL52HS4DFWZEXG43VMVCXMZLOORHG65DJMZUWGYLUNFXW5KTDN5WW2ZLOORPWSZGOVULHFCY#event-2903929483>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABWHFOB2Y4JMASZZ57DIRP3Q2BL7PANCNFSM4J6O26QA> .

[pollev]

They seem down indeed. However it seems that the other endpoints are still up and running. For example the splunk interface is still up at https://splunk.elfu.org. Or all of the terminal challenges are also still working. For example: https://docker2019.kringlecon.com/?challenge=iptables

If you are interested in doing some challenges, I have the direct URLs for most of them in my writeup at https://pollev.github.io/Kringlecon-2-Turtle-Doves/

My apologies that the writeup is not complete yet. It is quite a big wall of text to work on.

[ankanani]

I am done with all but the last objective 12. Spent like 3 days on it but no luck, giving up now. I have got around 65 confirmed bad IP addresses doing LFI, XSS, SQLi. However the pivot part, I tried so many combinations, but none worked. I just dont know if I am going in the right direction. If i get one or two confirmed bad addresses obtained by pivoting, then i can try further, else i am just going to pass for this one. It is frustrating. Are you done with all the challenges?

…

On Mon, Dec 23, 2019 at 1:01 PM Polle Vanhoof ***@***.***> wrote: They seem down indeed. However it seems that the other endpoints are still up and running. For example the splunk interface is still up at https://splunk.elfu.org. Or all of the terminal challenges are also still working. For example: https://docker2019.kringlecon.com/?challenge=iptables If you are interested in doing some challenges, I have the direct URLs for most of them in my writeup at https://pollev.github.io/Kringlecon-2-Turtle-Doves/ My apologies that the writeup is not complete yet. It is quite a big wall of text to work on. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#1?email_source=notifications&email_token=ABWHFOAZV6MTRUKXVV4KJATQ2BSMBA5CNFSM4J6O26QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHQODIQ#issuecomment-568385954>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABWHFOCZXKRNBLZ7OKAZ3CLQ2BSMBANCNFSM4J6O26QA> .

[ankanani]

I just saw your writeup, very nice effort in documenting everything. All the best for submission for the winning entry. And good luck for the remaining challenges. 8,9,10 are really good and involves some work. 11 is also good, you will be able to finish it quickly. and dont ask about 12 :-) Happy holidays!

…

On Mon, Dec 23, 2019 at 2:00 PM Anand Kanani ***@***.***> wrote: I am done with all but the last objective 12. Spent like 3 days on it but no luck, giving up now. I have got around 65 confirmed bad IP addresses doing LFI, XSS, SQLi. However the pivot part, I tried so many combinations, but none worked. I just dont know if I am going in the right direction. If i get one or two confirmed bad addresses obtained by pivoting, then i can try further, else i am just going to pass for this one. It is frustrating. Are you done with all the challenges? On Mon, Dec 23, 2019 at 1:01 PM Polle Vanhoof ***@***.***> wrote: > They seem down indeed. However it seems that the other endpoints are > still up and running. For example the splunk interface is still up at > https://splunk.elfu.org. Or all of the terminal challenges are also > still working. For example: > https://docker2019.kringlecon.com/?challenge=iptables > > If you are interested in doing some challenges, I have the direct URLs > for most of them in my writeup at > https://pollev.github.io/Kringlecon-2-Turtle-Doves/ > > My apologies that the writeup is not complete yet. It is quite a big wall > of text to work on. > > — > You are receiving this because you authored the thread. > Reply to this email directly, view it on GitHub > <#1?email_source=notifications&email_token=ABWHFOAZV6MTRUKXVV4KJATQ2BSMBA5CNFSM4J6O26QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHQODIQ#issuecomment-568385954>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/ABWHFOCZXKRNBLZ7OKAZ3CLQ2BSMBANCNFSM4J6O26QA> > . >

[pollev]

Hi,
We finished all except 12. Going to try it today!

[ankanani]

good luck, let me know how it goes. Anand

…

On Mon, Dec 23, 2019 at 2:51 PM Polle Vanhoof ***@***.***> wrote: Hi, We finished all except 12. Going to try it today! — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#1?email_source=notifications&email_token=ABWHFOHKU2YRAWA7AE47INLQ2B7KDA5CNFSM4J6O26QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHQVGHQ#issuecomment-568415006>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABWHFOGZBCIGCCQVGSFT6M3Q2B7KDANCNFSM4J6O26QA> .

[pollev]

Well, we will see if the servers come back online today. I still need the credentials to login to the sled machine thing. But I suppose the elf standing next to it is going to give me those...

[ankanani]

The elf wont give the credentials. The ELF just tells you to look for bad IPs in the logs. And some hints. This is the website:https://srf.elfu.org/ And if you have the zeek logs, then you can start working on the challenge. The credentials are supposed to be found by you as the first step, by analyzing the logs. Anand

…

On Mon, Dec 23, 2019 at 3:21 PM Polle Vanhoof ***@***.***> wrote: Well, we will see if the servers come back online today. I still need the credentials to login to the sled machine thing. But I suppose the elf standing next to it is going to give me those... — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#1?email_source=notifications&email_token=ABWHFODSCAZN5TE44NB2P6LQ2CCZBA5CNFSM4J6O26QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHQXNKY#issuecomment-568424107>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABWHFOACQKPUHK6X73PALEDQ2CCZBANCNFSM4J6O26QA> .

[ankanani]

i managed to finally crack the last one. so all done now. :-) Also i tested your script. It worked wonderfully. Happy Holidays! and good luck for the rest of the challenges! Cheers Anand

…

On Mon, Dec 23, 2019 at 3:31 PM Anand Kanani ***@***.***> wrote: The elf wont give the credentials. The ELF just tells you to look for bad IPs in the logs. And some hints. This is the website:https://srf.elfu.org/ And if you have the zeek logs, then you can start working on the challenge. The credentials are supposed to be found by you as the first step, by analyzing the logs. Anand On Mon, Dec 23, 2019 at 3:21 PM Polle Vanhoof ***@***.***> wrote: > Well, we will see if the servers come back online today. I still need the > credentials to login to the sled machine thing. But I suppose the elf > standing next to it is going to give me those... > > — > You are receiving this because you authored the thread. > Reply to this email directly, view it on GitHub > <#1?email_source=notifications&email_token=ABWHFODSCAZN5TE44NB2P6LQ2CCZBA5CNFSM4J6O26QKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEHQXNKY#issuecomment-568424107>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/ABWHFOACQKPUHK6X73PALEDQ2CCZBANCNFSM4J6O26QA> > . >