Archive
33 posts
Browse another category or search the archive.
Why I created a Dynamic Session Cookie Script for OWASP ZAP and script for BurpSuite Community Edition When performing security testing with OWASP ZAP…
Goal Bypass firewall to get out with ssh Bypass firewall to use VPN client inside network that blocks for example Fortinet vpn client on…
Start I have a laptop running Kali and Virtual Box with a kali vm on it. I wanted to have a setup that is…
Time to do some wireless hacking. If you read my other posts you know that I am on a mission get OSCP. But sometimes…
Hi, this will be a short one. But I must put down in words what my thoughts are about the C2 tests that I…
Now we are gonna look at SILENTTRINITY from @byt3bl33d3r I think this will be the last test of Command and Controll application. I have…
It is time for part 4 in this series to set up a Command and Control, and this time I am trying out C2…
It is time for part 3 in this series to set up a Command and Control, and this time I am trying out C2…
It is time for part 2 in this series to set up a Command and Control, and this time I am using ssh for…
Hi, I know that is been a while since the last post, but life got in the way. But it is time now. My…
Hi all! If you are like me attending the Threat Hunting Training Course named Cyber Threat Hunting Level 1 w/ Chris Brenton | 4-Hours…
Hi! Goal for today is to get a list of what countries is trying to much to connect to my server using fail2ban. I…
First this is not advanced BufferOverflow, more for me to write down and document what I did at tryhackme to get BufferOverflow Prep working.…
In this post I will try to explain why it is important to use masks when you crack password from hashes with hashcat. The…
Hi! I wanted to dump hashes on a Windows 10 box without any external tools. This is how I did it. We start at…
Really nice article about serverless computing and security problems that needs to get addressed NOW. Found the article at mwhite page but this article…
I was reading on Daniel Miessler website and got really excited about his article about replacement to fail2ban. https://danielmiessler.com/study/crowdsec/?mc_cid=970356fcef&mc_eid=fa6207cba8 ). Please subscribe to his…
It is time to test LogonTracer from @jpcert_en you can get your copy from https://github.com/JPCERTCC/LogonTracer From the website:LogonTracer is a tool to investigate malicious…
We have now come so far that we want to add things in my installation of SecurityOnion. And we will start with how to…
I must thank @BHinfoSecurity to get my interest in this. There webinars is great, especially 30 minutes before the real webinar begins.Now lets get…
Hi, now after some other installations in my “lab” it is time to look at logging. I got really inspired by webinars from BlackHills,…
This is follow up of the previous post regarding my rig. How do I access this where ever I am? I use SSH tunneling…
My goal with this project was to create a hacking rig that I can use when doing hackthebox, tryhackme and other ctf:s. I was…
I wanted to use proxychain with IPv6, ended up with this configuration. If you have not install proxychain4 do that now! Tor configuration file…
I am running Kali and VirtualBox. When running Virtualbox there are some issues. If the machine that you are running AMD this perhaps works.…
This is a simple way to test if your email security is ok. Open a web browser and access https://mail-tester.com and copy the destination…
I am not a programmer from the beginning so I struggle a lot with buffer overflow part of the PTP course. I can not…
Update 2022-08-25 Seems that this is not gonna be free anymore 🙂 https://blog.heroku.com/next-chapter I was watching a YouTube video from https://twitter.com/thecybermentor and wanted to…
We start to collect possible hostnames from websites with Cewl cewl http://10.10.10.1 -w cewl.txt You can also use some other switches like -d =…
This is just for demo, I used root as user, you should perhaps consider other user to do this. Installation of Kali Download Kali…
This was done from Kali box. Of course the Sharphound was ran on a compromised computer. Used application Bloodhound and Sharphound ( https://github.com/BloodHoundAD/SharpHound )…
I needed to compile an exploit in ParrotOS. Did not have a Windows machine at the moment. In this case it was MS03-26 for…
CEH Practical – LPT (Master) – CTF Notes I have gather these notes from internet and cources that I have attended .…
