Oscp

This is my 17th write-up for Frolic, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is my 16th write-up for Blocky, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

Exploiting Real World Buffer Owerflow The application is an FTP client vulnerable to a buffer overflow. When the client connects to an FTP Server and recieves banner, if banner is too long program crashes. The application we are testing is ElectraSoft 32Bit FTP Exploit Python code : #!/usr/bin/python from socket import…

I’m 64, and I’m just embarking on a CyberSecurity Learning Path with a view to getting a role doing something I’ve been really interested in for a long time. I thought it may be helpful to others at a similar age group who are considering a comparable move if I…

This is my 15th write-up for Networked, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is my 14th write-up for Mirai, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…

This is a write-up of Shocker on Hack The Box — it is for my own learning as well as creating a knowledge bank. It’s just my third box, so I am doing a combo of my own trial and error and following Ippsec + Rana Khalil. Recon To start with…

For the past 30 years, owners of Windows networks have relied on Microsoft’s Active Directory (AD) services to connect users and allow the sharing of files and databases. Now, as we enter the realm of cloud computing, many organizations are switching to cloud directory services such as Azure Active Directory…

This is my 13th write-up for SwagShop, a machine from TJNull’s list of HackTheBox machines for OSCP Practice. The full list can be found here. In a general penetration test or a CTF, there are usually 3 major phases that are involved. Enumeration and Scanning (Information Gathering). Initial Foothold. Privilege…