SweetRice CMS Exploitation | LazyAdmin TryHackMe

LazyAdmin is a machine available on TRYHACKME, designed for those looking to hone their skills in a controlled environment. This box provides opportunities to delve into web application exploration, exploit a documented CVE within a CMS, and understand a fundamental privilege escalation technique.   Key Takeaways Enumeration: Systematic exploration to identify open ports, active services, […]

Exploiting Samba with Metasploit | HackTheBox

Lame is a beginner-friendly box available on HackTheBox. In this walkthrough, I’ll go through Nmap, SMB file shares, anonymous FTP logins, Searchsploit, and Metasploit to tackle this machine.   Insights Vulnerability Scanning: Utilizing tools like Nmap to identify open ports and potential weaknesses in services on a target system. Exploitation Techniques: Employing both automated tools […]

OSINT For CTF

Passive Information Gathering in CTFs: A Deep Dive into Essential Tools and Techniques Introduction Passive information gathering is a vital phase in Capture The Flag (CTF) competitions. This preliminary reconnaissance step involves collecting data about a target or network without actively interacting with it. Successful CTF participants often use a range of tools and techniques […]

Pass the Ticket: An AD Attack Method

Pass-the-Ticket (PtT) is a popular method of attack in AD environments, capitalizing on Kerberos tickets to gain unauthorized access. This guide breaks down PtT for the active CTF player, offering actionable code and clear steps to execute under time pressure. PtT Basics In Kerberos authentication, tickets, rather than passwords, grant access to resources. If an […]

Kerberoasting: An Offensive Playbook

Active Directory, a cornerstone of many networks, is riddled with complexities and nuances. It is these intricacies that give birth to vulnerabilities like Kerberoasting. This article aims to provide a detailed, hands-on guide to Kerberoasting for Capture The Flag (CTF) enthusiasts. Let it serve as a touchstone during your challenges. Kerberos and SPNs Kerberos A […]

Back To Top