Security research, writeups, and technical deep-dives
Here are the slide deck for the Nullcon Talk me and Shreya presented. Presentation for nullcon 2022Download And here are the Demo videos for both semgroup and XSS bomb. Basic Semgrep usage XSS bomb in action XSS bomb in action
Read MoreWriteup on Shibboleth (Linux HackTheBox) | Initial foothold was through Zabbix code execution | Privesc was by exploiting vulnerable database
Writeup on Horizontall (Linux HackTheBox), w/o Metasploit, both user & root exploitation through enumeration & exploitation using CVE.
Writeup on Forge (Linux HackTheBox), w/o Metasploit, exploiting SSRF & SUDO permissions for privilege escalation.
Writeup on Previse (Linux HackTheBox), w/o Metasploit, exploiting command injection & PATH variable exploitation for Privilege escalation.
Writeup on Delivery (Linux HackTheBox) | email impersonation for initial foothold | enumeration & rule-based hash cracking for PrivEsc |
Writeup on Cap (Linux HackTheBox), w/o Metasploit, exploiting parameter tampering & set user capabilities for Privilege escalation.
Writeup on Shocker (Linux HackTheBox), w/o Metasploit, exploiting Shellshock & SUDO permissions for privilege escalation.
Writeup on BountyHunter (Linux HackTheBox), w/o Metasploit, exploiting XXE & performing code analysis for Privilege escalation.
What are Kubernetes pods and how they work in depth. pods are deployed on nodes and kubernetes pods are the smallest unit in the ecosystem.
I will cover Kubernetes Basics in this course about Kubernetes architecture design deploying a basic Kubernetes test environment.