Blog

pre.empt's Maelstrom series builds a minimal C2 and its detections Byte

Modern Initial Access and Evasion Tactics Byte

Phishing for persistence instead of an immediate callback Byte

Fake Klitschko kept Berlin's mayor on a video call for 15 minutes Byte

Alexa dead grandma audio deepfake Byte

CVE-2022-24436 - Hertzbleed: frequency scaling as a remote timing side channel Vulnerability

PyPI packages steal AWS keys and environment variables Byte

Android Malware by APT-Q-39/SideWinder in Google Play Byte

CVE-2022-32250 - Local privilege escalation via use-after-free in netfilter Vulnerability

Malicious Dependency in multiple PyPI packages Byte

Symbiote Linux malware uses LD_PRELOAD and hides its traffic with BPF Byte

CVE-2022-30190 - Follina: Office documents run code via the MSDT handler Vulnerability

CVE-2022-26134 - Confluence unauthenticated OGNL injection RCE Vulnerability

ALPHV ransomware hits the Austrian state of Carinthia Byte

Offensive Security Web Expert 6 min read

Note: OSWE is one of three certifications required for OSCE3 (along with OSED and OSEP), which replaced the original OSCE in 2020. I passed the Offensive Security Web Expert exam in July 2020. Now, I …

SANS Holiday Hack Challenge 2017 Solution 25 min read

Letters to Santa app contains a reference to a development system in a HTML comment section. <!-- Development version --> <a href="http://dev.northpolechristmastown.com" …

Vulnhub - Breach 3 boot2root CTF walkthrough 10 min read

The third boot2root system in the Breach series is an intermediate challenge. This time the VM will automatically acquire an IP address via DHCP. First, let’s identify the target system. With …

Vulnhub - Breach 2.1 boot2root CTF walkthrough 8 min read

Breach 2.1 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.151) so you will need to configure your host-only adaptor to this …

Vulnhub - Breach 1 boot2root CTF walkthrough 10 min read

Breach 1.0 is meant to be beginner to intermediate boot2root/CTF challenge. The VM is configured with a static IP address (192.168.110.140) so you will need to configure your host-only adaptor to this …

Social Engineering with PowerShell Empire and gophish 3 min read

Word macros are one of the top sources of malware infection. Creating such a malicious macro can be done in less than 10 minutes. This article will give an insight how to perform such an attack with …

GIAC Exploit Researcher and Advanced Penetration Tester 6 min read

May 2016 I had the chance to participate in the SANS SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking in Amsterdam. The course syllabus gave a good outline about what to …

Password Cracking on Amazon EC2 4 min read

Cracking with the desktop computer is not always a good idea. It can be quite noisy when you are trying to sleep. The room can become too hot for a hacker. And most important of all, all the hashes …

The 2015 SANS Holiday Hack Challenge - Solution 15 min read

Which commands are sent across the Gnome’s command-and-control channel? EXEC:iwconfig in packet 363 EXEC:cat /tmp/iwlistscan.txt in packet 573 What image appears in the photo the Gnome sent across …

Offensive Security Certified Expert 3 min read

Update (October 2020): The OSCE certification and Cracking the Perimeter (CTP) course have been retired. They have been replaced by OSCE3, which requires passing three certifications: OSED (Windows …

Exploit Exercises - Protostar - Final levels 21 min read

Exploit-Exercises: Protostar For this level we have got a binary listening on port 2995. Let’s find out what this binary is up to. 0x08049833 <main+0>: push %ebp 0x08049834 …