All about Enumeration: OSCP version
IN PROGRESS Enumeration is key As a OSCP holder, here’s how I would enumerate the machines. Rustscan (all ports) I’d do a quick rustscan for all ports first and pipe the ports into nmap -p ...
IN PROGRESS Enumeration is key As a OSCP holder, here’s how I would enumerate the machines. Rustscan (all ports) I’d do a quick rustscan for all ports first and pipe the ports into nmap -p ...
IN PROGRESS What is User Account Control (UAC)? According to Microsoft: User Account Control (UAC) is a Windows security feature designed to protect the operating system from unauthorized...
I passed my OSCP last year and I’ll share some tips and advice because I’m seeing a lot of people failing over the last months and I’d be one of them if I didn’t persevere and try everything until ...
The power of Impacket Often times during a Post-Exploitation phase, the box or an exercise we need to access certain Windows (mostly) machines that don’t have internet or any way to transfer a f...
GOAD is a pentest active directory LAB project. The purpose of this lab is to give pentesters a vulnerable Active directory environment ready to use to practice usual attack techniques. - https:...
Process Hollowing We can finally use a technique called Process Hollowing, where a victim process is created in a suspended state, its original process (e.g.: notepad.exe) is carved out from memor...
After a long journey, I finally received my passing results on October 2th that I have passed OSCP! In progress: CRTP! Soon: CRTO
ClamAV is a Linux machine from Offsec’s Learning Plataform: Proving Grounds. The name reflects an open-source antivirus engine. Let’s begin! Enumeration I started off by firing up rustscan sinc...
Learning Objectives Understanding the CI/CD concept Overview of risks associated with CI/CD Having a basic understanding of CI/CD exploitation vectors First thing I did was to get the IP and ex...