Blue Team fundamentals Part Two: Windows Processes.

In part one I touched on logging and the importance of working with what you have already got, rather than trying to reinvent the wheel. There is no point adding more logs if you’re not looking at what is already there. The same can be said…

wfuzz— Using the web brute forcer

I like wfuzz, I find it pretty intuitive to use and decided to write a little bit about a couple of use cases for this neat little tool.

All the usual caveats, there are so very many ways available to skin a cat, so this is by no means the only…

Vulnhub.com — Tr0ll2 CTF Walkthrough

I’m warming up, stretches and leans, so that I can pull the trigger and start my OSCP, so an invite to play another VM from Pete was fortunate timing.

This time I’m battling Tr0ll2. I didn’t battle Tr0ll1, but presumably it’s going to…

Sudon’t escape so easily!

How poor sudo configuration leads to simple full root access.

** I’ve added some ninja edits halfway down to clarify some things **