CTFs (Capture The Flag competitions) offer hands-on experience, simulating real-world cyber scenarios. They hone skills, encourage problem-solving, foster teamwork, and…
Windows Security: Abusing Access Tokens | Practical
Windows, in its core security design, leverages access tokens to determine if accounts possess the requisite permissions to execute certain…
SQLi and Reverse SSH Tunnelling | Game Zone THM
Game Zone, offered by TryHackMe, is a box that covers a broad spectrum of tasks. It takes participants through SQL…
Working with Linux Capabilities | Cap HackTheBox
Linux capabilities allow for a nuanced approach to the security architecture, breaking down the absolute root privilege into specific individual…
Exploiting HeartBleed for OSCP | Valentine HackTheBox
HackTheBox presents “Valentine”, a vulnerable machine centered around OpenSSL’s well-known HeartBleed issue. This challenge pushes us to grapple with essential…
SweetRice CMS Exploitation | LazyAdmin TryHackMe
LazyAdmin is a machine available on TRYHACKME, designed for those looking to hone their skills in a controlled environment. This…
Exploiting Samba with Metasploit | HackTheBox
Lame is a beginner-friendly box available on HackTheBox. In this walkthrough, I’ll go through Nmap, SMB file shares, anonymous FTP…
OSINT For CTF
Passive Information Gathering in CTFs: A Deep Dive into Essential Tools and Techniques Introduction Passive information gathering is a vital…
Riddles and Recon: Cybersecurity
When venturing into the realm of Capture The Flag (CTF) challenges, it’s often the simpler boxes that impart valuable lessons,…