Untitled @joy-jules - Tumblr Blog

Spookifier Hack The Box Walkthrough – SSTI Web Challenge

This article is a walkthrough for the Spookifier Hack The Box web challenge. Spookifier is a Python-based web challenge that revolves around Server-Side Template Injection (SSTI). We will also talk about the multiple payloads for SSTI and mitigation of it. Before we start -What Is SSTI (Server-Side Template Injection)? Server-Side Template Injection occurs when a web application takes…

#flask #hackthebox #hacktheboxspookifier #jinja #jinja2 #mako #mako python #Mustache #owasp #payloads for SSTI #python #server side template injection #spookifier #SSTI

Sherlock Dream Job-2 Walk-through

DreamJob-2 is a threat intelligence scenario focused on analyzing malware associated with the Lazarus Group and gathering intelligence on their custom-built tools. In this walkthrough, we analyze multiple artifacts, identify malware behaviors, and correlate findings with the MITRE ATT&CK framework. Who Is the Lazarus Group? The Lazarus Group is a North Korea–attributed Advanced Persistent…

AI LLM Security Testing: How to Scope, Test, and Implement Guardrails

This year I had the opportunity to perform security testing on an LLM agent, and at first, I wasn’t sure where to begin. I spent hours researching how the system works and how it should be approached from a security perspective. When you’re under time pressure, you naturally look for the shortest path to understand the system and get meaningful results.This article summarizes that…

How to do a Security Review - An Example

In my last article, you learned the basics of how to do your First Security Architecture Review, including – understanding the environment, defining scope, and identifying key security outcomes. Now it’s time to go one step deeper. In this article, we’ll focus on how to perform a full Security Review: a detailed examination of design, data flows, integrations, and security controls to ensure…

#Cybersecurity #arch review #cybersecurity #Security arch review example #security architecture #Security architecture review #security engineer

How to do your First Security Architecture Review!

A security architecture review is a systematic assessment of an environment’s design, configuration, and controls to evaluate whether they meet security requirements and can withstand realistic threats. At some point, if you lean toward product or infrastructure security, you’ll inevitably find yourself doing a review like this. When I did my first one, I didn’t have a mentor or a “how-to”…

#confluence #jira #review #SAR #Security architecture review #security engineer

DogCat - Exploiting LFI and Docker Privilege Escalation -TryHackMe Walkthrough

In this walkthrough, we’ll explore the Dogcat room on TryHackMe, a box that features a Local File Inclusion (LFI) vulnerability and Docker privilege escalation. LFI allows us to read sensitive files from the system and eventually gain access to the server.There are a total of 4 flags in this machine which we need to find. Let’s Dive in! Step 1: Scanning the Target Start by scanning the target…

#Backup Script Exploit #Bash Reverse Shell #Crontab Exploit #Cybersecurity in Docker #Docker Container Security #Docker Exploit Tutorial #docker privilege escalation #Docker Security #Docker Vulnerabilities #Linux Privilege Escalation #Netcat Listener Setup #Reverse Shell Exploit #Shell Injection Attack #Tar Archive Exploit #Volume Mount Vulnerability

Prime: 1 - Walkthrough for OSCP Series

Prime: 1 is a challenging boot2root machine created by Suraj Pandey. It is designed for those who are preparing for the OSCP exam and is a great way to practice your penetration testing skills. In this blog post, I will walk you through the steps I took to root the machine, including: Performing a port scan to identify the open ports on the machine Using nmap to enumerate the services running on…

View On WordPress

LazySysAdmin - Vulnhub walkthrough

LazySysAdmin – Vulnhub walkthrough

LazySysAdmin is an easy to crack VM. There are multiple ways to crack this machine, several ports and mis-configured services are present inside this box. The takeaway from this machine for me is to understand a service better and thinking simpler to get root privileges after we are able to exploit a badly configured service. Prerequisites: 1. Download LazySysAdmin –…

View On WordPress

#attacking phpmyadmin #attacking smb #attacking ssh #lazysysadmin #phpmyadmin #service misconfiguration #smb #ssh #sudoer #web port #wp-config.php

digital world.local: Vengeance Walkthrough - OSCP Way

digital world.local: Vengeance Walkthrough – OSCP Way

Vengeance is one of the digital world.local series which makes vulnerable boxes closer to OSCP labs. This box has a lot of services and there could be multiple ways to exploit this, Below is what I have tried. Lab requirement: 1. Kali VM 2. Download Vengeance: https://www.vulnhub.com/entry/digitalworldlocal-vengeance,704 3. Some patience. I have written article already about how to set up lab…

View On WordPress

#exploit #python to convert text in wordlist #smb #smbclient #smbmap #tftp

DC-9 Vulnhub Walkthrough - OSCP way

DC-9 Vulnhub Walkthrough – OSCP way

Recently, My focus turned more towards OSCP and I am thinking of taking the exam. After reading tons of people’s experience over Reddit, I took some notes on what would be my way of studying for this. It isn’t easy from the looks of it and to win with time, I need a lot of practice. Some articles which I found useful are…

View On WordPress

DC-9 Vulnhub Walkthrough - OSCP way

DC-9 Vulnhub Walkthrough – OSCP way

Recently, my focus turned more towards OSCP and I am thinking of taking the exam. After reading tons of people’s experience over Reddit, I took some notes on what would be my way of studying for this. It isn’t easy from the looks of it and to win with time, I need a lot of practice. Some articles which I found useful are…

View On WordPress

This is a test post

This is a test posts.

View On WordPress

DC-9 Vulnhub Walkthrough -OSCP way

Recently, My focus turned more towards OSCP and I am thinking of taking the exam. After reading tons of people’s experience over Reddit, I took some notes on what would be my way of studying for this. It isn’t easy from the looks of it and to win with time, I need a lot of practice. Some articles which I found useful are…

View On WordPress

#DC9 #editing /etc/psswd #hacking #linux priv escalation #openssl #OSCP #overthewire #path traversal #python script for sqlinjection #SQL Injection #union based SQL Injection #walkthrough

The Binary Exploitation: Stack based Buffer overflow

This article talks about cracking Level 13 Binary of Cyberstart CTF. The hint that was given for this challenge is “Cyclic Pattern”, which means we need to use pattern finder tool to figure out the length of the buffer and then run the arbitrary function. Let’s crack this: Running the binary gives us this output: The output says: “Overflow the buffer to execute the function at memory address :…

View On WordPress

#buffer overflow exploit #Cyberstart #cyberstart level 13 #finding offset #gdb #Metasploit #msf #msf-pattern_create #msf-pattern_offset #objdump #segmentation fault exploit #stack based buffer overflow

Empire: LupinOne Walkthrough - Privilege escalation through Python Libs

Empire: LupinOne Walkthrough – Privilege escalation through Python Libs

This article is a walkthrough for Empire LupinOne vulnerable machine. You can download this from vulnhub. The vulnerable machine is full of fuzzing and escalation of privileges by exploiting Python libraries with SUID being setup. Let’s look into exploiting this: Requirements: 1. Vmware/Virtual Box < This is to run the vulnerable machine. 2. Download LupinOne :…

View On WordPress

#hacking python libraries #john password cracking #libraries #linux #Privilege escalation through Python Libs #python #ssh private key hacking #ssh2john

Log4Shell Quick Lab Setup for Testing

Last month, On December 09 2021, The release of a Remote Code Execution POC over twitter involving exploitation of Apache’s log4j2 logging class took everyone’s peace away. The attack was pretty simple and the fact that it can be easily exploited by anyone is what made this more terrifying. The first edition of this attack which was exploited in the wild was based on exploitation of JNDILookup…

View On WordPress

#apache logging log4j exploit #dnslog.cn #interactsh. canarytoken #jndiexploit #jndiexploitkit #log4j #log4j2 #log4shell #log4shell.tools #marshelsec

Pwned Vulnhub Walkthrough

Pwned vulnhub challenge is an easy boot2root machine. One of the key take away from this machine is how you can escalate your privileges using Dockers. This blog post is about how I exploited this machine and what are the different tools I used to make that happen. Below are the requirements: You can get the virtual machine from here : https://www.vulnhub.com/entry/pwned-1,507/ I used Kali as a…

View On WordPress

#docker privilege escalation #pwned #pwned vulnhub #shell script #ssh #vulnhub machine

Trending Blogs

Recently Viewed Blogs

Untitled