Blue Writeup / Walkthrough Hack the box
This is a writeup on Blue (Windows HackTheBox), running SMB. Exploitation invades the Eternal Blue MS17-010 vulnerability.
./blog
Security research, writeups, and technical deep-dives
Devel Writeup/Walkthrough Hack the box
This writeup is based on Devel HackTheBox which is an easy-rated Windows machine. It having File Upload and Windows Kernel Vulnerability.
Arctic Writeup / Walkthrough Hack the box
This is a writeup on Arctic (Linux HackTheBox), running Adobe's ColdFusion. Exploitation uses CVEs, later requiring privilege escalation for the root flag.
Legacy Writeup/Walkthrough Hack the box
This writeup is based on Legacy on Hack the box. It was a windows box. It starts with Samba, which has two bugs to exploit and get the shell.
How to Silver Ticket Attack Active directory
Silver ticket attack for domain persistence in active directory network silver ticket is a forged service ticket using service account hash.
How to Golden Ticket Attack Active directory
Golden ticket attack for domain persistence in an active directory network golden ticket is a forged Ticket granting ticket using the KRB TGT
Lame Writeup / Walkthrough Hack the box
This writeup is based on Lame on Hack the box. It was a Linux box. Using samba username map script vulnerability, we gain user and root.
How to Kerberos? its components and function
Kerberos is used in windows authentication and the active directory. It is an authentication protocol that is if implemented is more secure ..
What are cookies and why are they used? basics of web security
What are cookies and why are they used? and types of cookies and there attributes for application security, Web Development basic understanding
Sending mails from node js web application
Using node mailer to sending mails from a node js web application using express and gmail smtp to send mails from form to email
Redcross Writeup / Walkthrough Hack the box
This Writeup is about Redcross on hack the box. It was a Linux box. It starts with XSS on admin stealing cookies creating a root user in MySQL to get root.