CMesS — TryHackMeThis is a really great medium-level box that involves enumerating subdomains and discovering sensitive information on /dev, including the email and password for the Gila CMS admin user. Utilizing these credentials, one can log in via /login. Once ins...Dec 31, 2023·7 min read
VulnversityReconnaissance As usually we gonna scan the target with the nmap └──╼ $sudo nmap -sS -sV -sC -T4 --min-rate 5000 10.10.14.231 -vv ... Discovered open port 21/tcp on 10.10.14.231 Discovered open port 445/tcp on 10.10.14.231 Discovered open port 22/tcp...Dec 22, 2023·4 min read
Simple CTFAlright, simple CTF is a beginner level CTF on tryhackme that teaches necessary skills for all CTFs, including scanning and enumeration, research, exploitation, and privilege escalation. Room URL Scanning As always we start by scanning the target mac...Dec 22, 2023·4 min read
OWASP Top 10 — TryHackMe WalkthroughIntroduction: Room This room breaks each OWASP topic down and includes details on the vulnerabilities, how they occur, and how you can exploit them. You will put the theory into practice by completing supporting challenges. Broken Access Control C...Dec 13, 2023·37 min read
HackTheBox - PCEnumeration First thing we are going to gather information about the target system PC that has been assigned an IP address of 10.10.11.214 using Nmap. I like to use -vv option to learn about the ports while Nmap scans the target system. sudo nmap -sV...Dec 10, 2023·5 min read
SQL InjectionBrief SQL Injection, commonly known as SQLi, involves executing malicious queries on a web application database server. When a web application fails to validate user input before interacting with the database, it becomes vulnerable to attackers who m...Dec 10, 2023·24 min read
Command InjectionIntroduction (What is Command Injection?) In this section, we'll explore the web vulnerability known as command injection. We'll learn about its nature, understand its impact, and the risks it poses to applications. Subsequently, you'll have the oppo...Dec 10, 2023·8 min read
