Level: (very) Easy Link: Agent T Highlight: This is a simple machine in which we abuse the PHP backdoor to gain RCE Enumeration This is very simple, and does not need much enumeration. We know port 80 is open. I ran a nmap scan on this port to find out…

Level: Medium OS: Linux Link: Ollie Highlight: Using a SQLi vulnerability in the IPAM address management software to initial access. Privilege escalation using a bash script running as root, which we can find using pspy. Enumeration nmap scan reveals that port 22,80 and 1337 are open. Port 1337: Here we…

This is a medium level box with some very famous vulnerabilities of 2021. Upon initial exploitation, we will endup in a docker container where we will find the user flag. We then breakout of the docker container to get to the root flag. Link to the box: Oh My WebServer Enumeration …

This is a simple box with a straight forward SQLi vulnerability, which can be exploited to upload a php-reverse shell, and then use the cronjob script which is running every minute to escalate privileges. The box also has some rabbit holes, but nothing that will waste too much of your…

This is a short write-up for beginners of the task-4 of the www.tryhackme.com box on CVE-2021–41773 and 42013; the infamous Apache HTTP server path traversal vulnerabilities. You can access and try the box here: https://tryhackme.com/room/cve202141773 This is an informational box, where you mainly learn about the above mentioned CVE and…

Fuzzing has been one of the most popular methods of automating bug finding in recent time. While fuzzers like American Fuzzy Lop, Honggfuzz etc. focus mainly on C/C++ code, there wasn’t a breakthrough for Python until now. Recently, Google opensourced their Python fuzzer Atheris! You can read their blogpost here…

American Fuzzy Lop (AFL) is without doubt one of the most famous fuzzers. The project started by Michał Zalewski of Google has revolutionised the field of fuzzers. In this short write-up I want to introduce you to how I compiled the AFL++ fuzzer on my MacBook Pro with M1 chip…

** Updated as of 11.04.2021 ** With Apple moving away from Intel and releasing the new MacBooks with the ARM based M1 chip, a lot of us are still trying to figure out how many things work. This is a short writeup on how I got the Anaconda Navigator, and…