$ Forensics

HACKTHEBOX CA26 Very-Easy FOR

Force Push

A force-push hid a commit, but ORIG_HEAD and the dangling object survived. Recovered the leaked reliquary credentials.

#CyberApocalypse2026#Forensics#Very-Easy#Recover#Git#force-push
HACKTHEBOX CA26 Very-Easy FOR

The Compressed Truth

Analyzing NTUSER.DAT hives with RegRipper to trace CROWQUILL's stolen-credential access to vmarr's machine, uncovering KeeFarce credential theft and a staged/exfiltrated archive via 7-Zip artifacts.

#CyberApocalypse2026#Forensics#Very-Easy#Registry#RegRipper#KeeFarce#KeePass