Exploiting Microsoft Windows Active Directory Certificate Service | CVE-2022-26923
Introduction We covered the recent vulnerability CVE-2022-26923 that affected Microsoft Windows Active Directory Certificate Service which allowed…
CTF Writeups
WIFI Penetration Testing With aircrack-ng | TryHackMe Wifi Hacking 101
Introduction We covered the basics of WIFI penetration testing with aircrack-ng and the concept of WPA 4…
Computer Forensics Tools | Kroll Artifact Parser and Extractor | TryHackMe KAPE
We covered KAPE as a computer forensics tool to extract forensics artifacts and process them for forensics…
DNS Enumeration with DIG | TryHackMe Dig Dug
Introduction We explained how to enumerate DNS records using DIG as part of TryHackMe Dig Dug. Check…
Understanding PrintNightmare Vulnerability | (CVE-2021-1675) and (CVE-2021-34527)
Introduction Per Microsoft, “A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs…
SQL Injection with SQLmap and Python Library Privilege Escalation | TryHackMe Biblioteca
Introduction This post is about TryHackMe Biblioteca. You can find the flags below and a video walkthrough…
Social Engineering with SET | THM Cyber Scotland
Introduction If you’ve ever wondered how a hacker actually hacks things then you’ve come to the right…
Understanding Sniffing and Man-In-The-Middle | TryHackMe L2 MAC Flooding & ARP Spoofing
Introduction Learn how to use MAC Flooding to sniff traffic and ARP Cache Poisoning to manipulate network…
Demonstrating SQL Injection Vulnerability – OWASP WebGoat Lab
In this post, we demonstrated SQL injection vulnerability using OWASP WebGoat Lab. SQL injection is a vulnerability…
Local File Inclusion Vulnerability | Billu-B0x Vulnhub Lab
In this post, we covered local file inclusion vulnerability using Billu-B0x machine from Vulnhub. Local file inclusion…
Command Injection Vulnerability | Mutillidae OWASP Lab
In this post, we covered command injection vulnerability and performed a practical demonstration using Mutillidae OWASP Lab….
Cross site request forgery CSRF Vulnerability – DVWA Lab
In this post, We demonstrated a scenario of exploiting CSRF vulnerability using DVWA vulnerable web application. Cross…
Reflected and Stores XSS – OWASP Mutillidae
In this write-up, we presented and covered cross site scripting vulnerability bothreflected and stored using Mutillidae. Reflected…
Insecure Direct Object Reference Vulnerability – Mutillidae OWASP Lab
In this post, we covered insecure direct object reference vulnerability which is one of the top 10…
Demonstrating Linux Systemctl Services Exploitation – Cyberseclabs Simple
In this post, we went over a Linux box from Cyberseclabs where to demonstrated the ability to…
Encoding and Decoding with Python | PicoCTF Transformation + net-cat
In this post, we covered encoding and decoding using python and Cyberchef. We solved two challenges from…
Investigating Conti Ransomware on Microsoft Exchange with Splunk | TryHackMe
In this post, we investigated the Conti ransomware that hit Microsoft Exchange via a series of vulnerabilities….
SQL Injection in Search Fields | TryHackMe Cybercrafted Minecraft CTF
In this post, we covered SQL injection in search forms and performed Linux privilege escalation on the…
DevOps Enumeration and Vulnerabilities | TryHackMe Advent of Cyber 3 Day 14
In this post, we covered enumerating vulnerabilities in the DeVOps among which is the insecure file permissions….
Linux Challenges Part 2 | OverTheWire Bandit Level 10-Level 19
In this post, we covered various concepts in Linux such as encoding and decoding, file compression,SSH,etc. This…