Security

CRTP Certification Review

23 minute read

A couple of days ago I took the exam for the CRTP certification by Pentester Academy. In this review I want to give a quick overview of the course contents, ...

Hack the Box Write-up #10: Buff

53 minute read

Write-up of “Buff” from Hack The Box

Hack the Box Write-up #9: Tabby

28 minute read

Write-up of “Tabby” from Hack The Box

Hack the Box Write-up #8: Fuse

33 minute read

Write-up of “Fuse” from Hack The Box

Disabling NX in Linux via Kernel Parameter (using GRUB)

less than 1 minute read

To boot Linux without Data Execution Prevention, so that the OS doesn’t mark certain memory regions as non-executable, we…

Exploiting Python pickles

22 minute read

How unpickling untrusted data can lead to remote code execution.

Hack the Box Write-up #7: Bart

29 minute read

Write-up of “Bart” from Hack The Box

Hack the Box Write-up #6: Kotarak

51 minute read

Write-up of “Kotarak” from Hack The Box

Hack the Box Write-up #5: TartarSauce

41 minute read

Write-up of “TartarSauce” from Hack The Box

Hack the Box Write-up #4: Cronos

19 minute read

Write-up of “Cronos” from Hack The Box

Hack the Box Write-up #3: Netmon

22 minute read

Write-up of “Netmon” from Hack The Box

Running commands in a specific user context in PowerShell

1 minute read

Using the Invoke-Command Cmlet, you can execute a script block in the security context of a different user.

Hack the Box Write-up #2: Networked

29 minute read

Write-up of “Networked” from Hack The Box

Hack the Box Write-up #1: Jerry

11 minute read

Write-up of “Jerry” from Hack The Box

Reading sniffed SSL/TLS traffic from curl with Wireshark

less than 1 minute read

If you want to debug/inspect/analyze SSL/TLS traffic made by curl, you can easily do so by setting the environment variable SSLKEYLOGFILE to a file path of y...

Pivoting: Setting up a port proxy with netsh on Windows

10 minute read

Pivot by setting up a portproxy between your machine and a machine in another network using “netsh interface portproxy add v4tov4 listenport= connectport= co...

Tunneling network traffic over DNS with Iodine and a SSH SOCKS proxy

15 minute read

Setting up a DNS tunnel and SOCKS proxy to send/receive data via restricted networks.

Hidden in plain sight: Alternate Data Streams

15 minute read

Have you ever wondered how a file in a file listing is shown with size 0 bytes but can still contain data? Or maybe wondered where all that meta data is stor...