Search for a command to run...
Articles tagged with #exploitation
Link to challenge on TryHackMe: Exploitation and Weaponisation Introduction The word "weaponisation" is used differently depending on context. In this room, it means turning a confirmed vulnerabilit
Link to the Walkthrough/Challenge on TryHackMe: Metasploit: Scanning and Exploitation Introduction In the previous room, you learned how to navigate the Metasploit Framework: searching for modules, co
Link to the Walkthrough on TryHackMe: Cyber Kill Chain Introduction Inspired by the military kill chains, the Cyber Kill Chain is a cyber security framework introduced by Lockheed Martin in 2011. It i
Introduction Django is a widely used Python web framework that exposes Object-Relational Mapping (ORM) layer to let developers query databases using familiar Python syntax. That convenience becomes a liability when user input is fed straight into ORM...
CVE-2021-4034 — aka Pwnkit — is a high-severity local privilege escalation in the Polkit package that was present in Polkit releases dating back to 2009. Because Polkit is installed by default on most mainstream Linux distributions, this vulnerabilit...
In late March 2022 the security community was alerted to remote code execution flaws affecting the Spring Framework. One of the issues—now commonly referred to as Spring4Shell (CVE-2022-22965)—impacts parts of Spring Core and, under a specific set of...
