PinnedAlok kumarSmuggling Files via HTML — Bypassing Web proxies & Spam FiltersUnderstanding HTML Smuggling — MITRE ATT&CK Tactic: Defense Evasion3 min read·Jul 4, 2023----
Alok kumarAdversary Simulation or Emulation! What should we go for?Terms like Adversary Simulation and Emulation are on fire these days. But what is the difference and what should we go for?2 min read·Oct 9, 2023----
Alok kumarOwning a machine using xp_cmdshell via SQL Injection — Manual ApproachWhat is xp_cmdshell?2 min read·Jun 17, 2023----
Alok kumarWhy verifying docker images is necessary? — Backdoring Docker Images.Exploring Docker Image Trust3 min read·May 20, 2023----
Alok kumarContainers, Securing Containers — Aren’t containers Safe?What are Cotainers?3 min read·Nov 2, 2022----
Alok kumarHow to extract ipa from Jailbroken iOS deviceOkay, This is another how-to blog.3 min read·Sep 16, 2022----
Alok kumarNullByte: 1 ~ Vulnhub — WalkthroughNullByte: 1 is very interesting box by ly0n. Getting user is pretty straight forward. We just need to exploit SQL Injection to get the…4 min read·Jun 29, 2022----
Alok kumarZico2: 1 ~ VulnHub — WalkthroughZico2 is an intermediate level box according to the author Rafael (@rafasantos5). The box was interesting and for solving the box includes…3 min read·Jun 28, 2022----
Alok kumarRunning Source Code Review scan using Fortify SCAStatic program analysis according to Wikipedia is “Static program analysis is the analysis of computer software performed without…3 min read·Apr 7, 2022----
