Explore >> Select a destination


You are here

blog.superautomation.co.uk
| | blog.ikuamike.io
4.0 parsecs away

Travel
| | Difficulty Release Date Author Intermediate 18 July 2019 Zayotic Summary This box had quite a good number of misconfigurations and vulnerabilities. Initial access was through copying a shadow backup file to a smb share accessible anonymously using a file copy vulnerability in proftpd. Then lateral movement and privilege escalation was achieved by exploiting rce a locally running librenms instance and finally abusing sudo permissions on mysql to get root.
| | piware.de
9.6 parsecs away

Travel
| |
| | jreypo.io
9.2 parsecs away

Travel
| | Getting SUSE Enterprise Linux integrated with Microsoft Active Directory is much easier than it sounds.
| | jmmv.dev
47.4 parsecs away

Travel
| Dependency injection is one of my favorite design patterns to develop highly-testable and modular code. Unfortunately, applying this pattern by taking Rust traits as arguments to public functions has unintended consequences on the visibility of private symbols. If you are not careful, most of your crate-internal APIs might need to become public just because you needed to parameterize a function with a trait. Let's look at why this happens and what we can do about it.