• Mapúa Institute of Technology

• AMAZING HV101

02_PasteZone

Lab: PasteZone

An urgent midnight intelligence alert has triggered a full-scale response: sensitive data

belonging to the Ministry of Energy has been discovered for sale on PasteZone, one of the

most notorious illegal platforms on the dark web. Cybercriminals use this site to

anonymously share details of compromised systems, vulnerabilities, and stolen data.

Preliminary investigations have confirmed that the leaked content originates directly from the

Ministry of Energy’s systems, posing a significant security threat.

Your mission is to identify the individuals or groups responsible for this breach, gather

intelligence on PasteZone’s administrators, and collect actionable evidence.

Question 1: What is the contact email address of the user

who published the energy.gov.hv post?

Answer: darkleaker@protonmail.hv

Question 2: What is the IP address of the attacker who

posted the energy.gov.hv data?

If we try to create a pastebin here we can see that the server in vulnerable to SSTI. So if we

inyect the following payload:

We can see that the server evaluates the expression and returns 49.