Exploitation

Introduction “Toxin” is a pwn challenge hosted by hackthebox. First Considerations The challenge provided: The binary of the program to exploit The library used remotely The right loader to use to load the libc First I patched the binary (using pwninit) to force the executable to also load the library provided by the…

Huge thanks to The Cyber Mentor for his walkthrough video. Summary: We discover and exploit a vulnerability in the TRUN (truncate) command of Vulnserver via a linear stack buffer overflow. This is part 1 and only the demonstration/walk-through, part 2 will be the theory and foundational knowledge. This walkthrough will feature…

Hi! I am making these walkthroughs to keep myself motivated to learn cyber security, and ensure that I remember the knowledge gained by THMs rooms. Join me on learning cyber security. I will try and explain concepts as I go, to differentiate myself from other walkthroughs. Room URL: https://tryhackme.com/room/owaspjuiceshop Prerequisites: Web…

This blog post will examine a new, unfixed, unpatched vulnerability with a high severity score (CVSS 7.8 — Critical) found in the wild. What is Microsoft Diagnostic Tool, and why do people fuss about it? MSDT is a diagnostic tool used to collect data from users when they encounter a problem. …

Earth is a “woman” , a womb, She is a sentient being and she is being exploited and controlled by dominating men for profit. A dominant and controlling man is clueless of feminine needs nor does he care to know her needs. Dominance requires Submission. I cannot tell you how…

Research/Background — I was playing around with my smart lights and decided to arpspoof the connection between my phone and my smart lights while i was switching the lights on, off and changing the color. I went trough the captured data and replicated the action in python as a poc script. How to exploit To exploit this vulnerability we need network access to the lights and a poc script. Download poc script from https://github.com/R00tendo/wiz_exploit

CVE-2022–26923 is dangerous. There is large privilege escalation vector aiming directly at the domain’s administrative account(or machine). Active Directory does NOT have Certificate Services enabled by default, but if enabled, they can expose the whole domain if there is a present vulnerable certificate template. In order to understand the exploit…

Hi Fellow hackers , Today we will explore the details of MSDT vulnerability and will exploit in the real time Overview This is Zero-day vulnerability in the Microsoft windows support diagnostic tool (MSDT) also known as “follina” exist when MSDT is called using a URL handler or protocol from an…