/explore
|
You are here 
|
andrewroderos.com | ||
| | | | |
0xdf.gitlab.io
Reel was an awesome box because it presents challenges rarely seen in CTF environments, phishing and Active Directory. Rather than initial access coming through a web exploit, to gain an initial foothold on Reel, I'll use some documents collected from FTP to craft a malicious rtf file and phishing email that will exploit the host and avoid the protections put into place. Then I'll pivot through different AD users and groups, taking advantage of their different rights to eventually escalate to administrator. In Beyond Root, I'll explore remnants of a second path to root that didn't make the final cut, look at the ACLs on root.txt, examine the script that opens attachments as nico. |
|
| | | | | ||
| | | | |
taeluralexis.com
We'll target a network comprising 3 machines, leveraging CVE exploits, pivoting, code obfuscation techniques, and AV bypass strategies. |
|
| | | | | ||
| | | | |
www.securitynik.com
In this 5 part series, I'm learning more about Powershell Empire from the perspectives of using the tool, analyzing the logs which gets crea... |
|
| | | | | ||
| | | | |
www.thezdi.com
[AI summary] A security researcher details an arbitrary code injection vulnerability (CVE-2023-35150) in the XWiki wiki software platform that affects authenticated users and requires immediate patching. |
|
| | | |||
