0 votes and 0 comments so far on Reddit

Exploiting 10,000+ Devices Used by Britain’s Most Vulnerable In this post, we’re going to detail some of the issues our team identified with the an extremely common Alarm & GPS device used by vulnerable people around the world (at least 10,000+ in the UK).…

We’ve packed it, we’ve wrapped it, we’ve injected it and powershell’d it, and now we've settled on feeding it a memory dump, and still Mimikatz remains the tool of choice when extracting credentials from lsass on Windows systems. Of course this is due to…

0 votes and 0 comments so far on Reddit

My GitHub: https://github.com/itsKindred My Twitter: https://twitter.com/kindredsec My Discord for any questions: https://discord.gg/CCZCJCu In this video, I...

Generate fake combolists.

Quick Summary Hey guys today Lightweight retired and here’s my write-up about it. Lightweight was a simple and a straightforward machine, I had fun solving it and I liked it. The idea behind the box is simple, We get initial ssh access then keep escalating…

Jump Ahead: Enum – User – Root – Resources – Special Thanks TL;DR Overall, I really enjoyed this box. Prior to doing this box, I had never really dealt with LDAP, nor did I …

Group Policy Preferences (GPP) has been around for a considerable amount of time, yet I still keep finding remmants of GPP passwords lying around within an Active Directory (AD) forests. For more background on GPP passwords you can read up on it here on Active…

Learn Basic Concepts of Linux. Best site to learn Linux from beginner to Advanced.

Few months ago, I bought a Samsung phone in order to analyse it. After few hours I found an unprotected receiver in the ContainerAgent…

A tool for parsing breached passwords. Contribute to hmaverickadams/breach-parse development by creating an account on GitHub.

0 votes and 1 comment so far on Reddit

Summary
HackerRank [https://www.hackerrank.com/] is a technical hiring platform that
helps businesses evaluate software developers based on skill. I found several
its website can be attacked to read arbitrary files.

Details
Most websites of Hackerrank use…

0 votes and 0 comments so far on Reddit

A modular C2 framework. Contribute to p3nt4/Nuages development by creating an account on GitHub.

In this post, I will demonstrate an understanding of CVE-2019-5021 by taking a closer look at two Alpine Docker images, configure Anchore Engine to identify the risk within the vulnerable image, and give a final output based on an Anchore policy evaluation.

Our honeypots frequently detect scans targeting various home automation protocol endpoints. Many of these attacks aim to exploit vulnerable consumer routers. Upon further investigation, we've discovered a persistent flaw affecting Linksys Smart Wi-Fi routers…