API TestingAPIs can be found in any IT aspect nowadays, from web and mobile applications all the way to IOT solutions and the cloud. It is of…Jan 191Jan 191
Mail rules/forms to get a shellIf you were in a redteaming assessments, and you somehow have a valid credentials to a user mailbox you can get a remote shell using the…Jan 3, 2022Jan 3, 2022
CVE-2021–44228 — Log4shellProof-of-Concept for Critical Apache Log4j Remote Code Execution Vulnerability Available (Log4Shell)Dec 16, 2021Dec 16, 2021
My first CVE! CVE-2021–41825: Verint Workforce Optimization-HTML InjectionHTML injection is a type of injection vulnerability that occurs when a user is able to control an input point and is able to inject…Oct 6, 2021Oct 6, 2021
Attacking Wireless network - WiFi HackingBefore starting, lets get some basics:Sep 26, 20211Sep 26, 20211
Linux L33T! - PE Cheatsheet! [OSCP Prep]One of the things that was hard for me to master during my OSCP preparation is privilege escalation. i didn’t know what to look for, where…Jun 24, 2021Jun 24, 2021
Windows L33T! — PE Cheatsheet [OSCP Prep]One of the things that was hard for me to master during my OSCP preparation is privilege escalation. i didn’t know what to look for, where…Jun 24, 2021Jun 24, 2021
Windows and Linux shells repositoryWhile doing OSCP i spent a lot of time looking for suitable reverse shells and web shells, i needed a repository for keeping all the shells…May 23, 2021May 23, 2021
How to solve windows buffer overflows like a proIn March 2020 i decided to go for OSCP certification after giving this thought quite some time. Not because anything but because i hated…May 3, 2021May 3, 2021