Search for a command to run...
Articles tagged with #exploitation
Introduction Django is a widely used Python web framework that exposes Object-Relational Mapping (ORM) layer to let developers query databases using familiar Python syntax. That convenience becomes a liability when user input is fed straight into ORM...
CVE-2021-4034 — aka Pwnkit — is a high-severity local privilege escalation in the Polkit package that was present in Polkit releases dating back to 2009. Because Polkit is installed by default on most mainstream Linux distributions, this vulnerabilit...
In late March 2022 the security community was alerted to remote code execution flaws affecting the Spring Framework. One of the issues—now commonly referred to as Spring4Shell (CVE-2022-22965)—impacts parts of Spring Core and, under a specific set of...
In this article, I will write a write-up for Exploitation Basics: Blue that covers Recons, Gain Access, Escalate, Cracking and Finding Flags. Scan the machine. (If you are unsure how to tackle this, I recommend checking out the Nmap room) How man...
In this article, I will write a write-up for Metasploit: Meterpreter that covers the Introduction to Meterpreter, Meterpreter Flavors, Meterpreter Commands, Post-Exploitation with Meterpreter, and Post-Exploitation Challenge. This room is still as ch...
In this article, I will write a write-up for Metasploit: Introduction that covers the Introduction to Metasploit, Main Components of Metasploit, Msfonsole, and Working with modules. What is the name of the code taking advantage of a flaw on the targ...
