Rce

Beginner-friendly CTF Agent T Published on TryHackMe Created by ben, JohnHammond, cmnatic, blacknote, and timtaylor. Let’s boot up the machine And Start Hacking!! A machine may take around 1–2 minutes to start. Let’s start with Nmap Scan. # Nmap 7.80 scan initiated Sat Aug 6 10:22:21 2022 as: nmap…

Poke around with the external surface and stuffs like external search and parameters on the outside and not really dive into learning the application like using it like a user. Always login as different users-→ access privileges comes in play. Others NB//: spin up burp and spend an hour or…

Remote code executions (RCEs) are dreams of all, but only some of them have found it. This story is about how I was able to find my RCE using simple fuzzing techniques and a little bit of recon. So here we go…. My Methodology: Gathered the in-scope domains. Started active…

First things first. Connect to the VPN thru your attackbox or use the provided pwnbox. Ping the machine IP address to make sure the connection is active. NMAP scan: nmap --top-ports 500 <ip address> I try to scan for the lowest hanging fruit first by doing…

Hi!!!, In this Article I would like to tell you a little about how I accidentally discovered the “Pre-Auth Remote Code Execution (CVE-2021–42237)” Attack on one of the Vendors affected by this attack. Note : I will Censor any Vendor affected by this attack. Description Sitecore XP 7.5 Initial Release to…

# Introduction As mentioned in Jang blog, We (me and Jang) found a mega 0-day. After April Critical Patch, finally the vulnerability was patched properly. If you never known about this vulnerability, please patch your system ASAP ! # Summary Let us name this attack The Miracle Exploit because it affects many products based…

Summary This is a writeup for the retired machine called Optimum. It is an easy Windows machine that has a remote code execution vulnerability within its HTTP web server on port 80. There are 2 ways of exploiting this machine; manually using public exploit or automatically using Metasploit. …

Overview In March 2022, Sophos fixed a critical vulnerability in its Sophos Firewall products. The vulnerability is tracked as CVE-2022–1040 and allows for remote code execution (RCE). An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and responsibly disclosed to Sophos…

Hello hackers, before we get into it, I would like to know your view of this — between a hacker’s curiosity and instinct which would you consider a more valuable asset? Now as the title of this writeup indicates, I would be covering how I leveraged an SQL injection (SQLi)…