Chux – Medium

Chux

Published in
System Weakness

What We Learned From Salt Typhoon Telecom’s Operation

Recently CrownStrike released a report about a big operation of the Chinese threat actor on telecom companies. But this operation wasn’t…

Dec 13, 2024

What We Learned From Salt Typhoon Telecom’s Operation

Dec 13, 2024

Published in
InfoSec Write-ups

5 Ways I Got RCE’s In the Wild

For offensive security professionals, finding RCE vulnerabilities is usually a crown jewel for many black-box and white-box projects. These…

Dec 7, 2024

5 Ways I Got RCE’s In the Wild

Dec 7, 2024

Published in
InfoSec Write-ups

From File Upload To LFI: A Journey To Exploitation

Recently I had a client that asked for a black-box pentest for a new web app that the company was about to release. The objective of this…

Dec 2, 2024

From File Upload To LFI: A Journey To Exploitation

Dec 2, 2024

5 Side Hustles For Ethical Hackers

As the offensive cyber roles (pentesters, red teamers, security researchers and more) are considered to be well paid jobs, ethical hackers…

Nov 30, 2024

5 Side Hustles For Ethical Hackers

Nov 30, 2024

BlackhatOps #1: A Syndicate Of Hackers

Disclaimer: BlackhatOps is an educational hacking series that builds a special plot for various cyber attacks in order to make an…

Aug 16, 2024

BlackhatOps #1: A Syndicate Of Hackers

Aug 16, 2024

SQLi, SSRF And Code Secrets — All In One

In this engagement, we’ll talk about little bit of recon, some code review and a creative way to exploit secrets and vulnerabilities that…

Jun 1, 2024

SQLi, SSRF And Code Secrets — All In One

Jun 1, 2024

Published in
InfoSec Write-ups

Real World GitLab Account Take Over

New target, this time it’s a company that provides VoIP solutions. The target has some serious clients like government organizations, banks…

May 3, 2024

Real World GitLab Account Take Over

May 3, 2024

How A Blackbox Target Turned To Whitebox With Recon

I was invited to a private bug bounty program of a tech company, one of the biggest tech companies in its country. The scope was pretty…

Apr 27, 2024

How A Blackbox Target Turned To Whitebox With Recon

Apr 27, 2024

Published in
InfoSec Write-ups

5 Methods I Use To Discover APIs

While working on a target, some of the most interesting parts to test is its API. APIs are dynamics, they get updated more often then…

Apr 12, 2024

5 Methods I Use To Discover APIs

Apr 12, 2024

5 Advanced Ways I Test For File Upload Vulnerabilities

As red teamers, pentesters and bug hunters — we all love to see file upload functionalities in our targets. There are many things that can…

Mar 22, 2024

5 Advanced Ways I Test For File Upload Vulnerabilities

Mar 22, 2024

Chux

Chux

Red Teamer and Security Researcher | CVE-2024-46990 | CVE-2024-54128 | Check out my X profile https://x.com/chux13786509

Following

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams