Supply Chain Attack: Lottie

Walkthrough summary

Supply Chain Attack: Lottie TryHackMe walkthrough with 6 answered prompts and lab methodology notes.

Sample prompts covered

• Which of the following Lottie Player's versions were vulnerable? Enter the correct option only.
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the C2 server used for registration/authentication? Use the Redacted/defanged version.
  Open the walkthrough page to inspect the full answer and command flow.
• Per the above code, what updated package version does the attacker push on npm.thm?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the port number on which the attacker will receive data?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the name of the form validator JS file being fetched from the CDN?
  Open the walkthrough page to inspect the full answer and command flow.