Year: 2019

Exploit Dev

64-Bit Return-to-libc Attacks

Bypassing NX on 64-bit Linux.

Exploit Dev

Bypassing Linux NX & ASLR

Bypassing NX & ASLR using pointer leakage and ROP.

Exploit Dev

Format String Exploitation

A quick tutorial on exploiting format string vulnerabilities to read and write memory.

Security Engineering

PowerShell Constrained Mode

A guide to enabling PowerShell constrained mode.

Security Engineering

Kali OpenVPN Killswitch

Ensuring all network traffic is routed over an OpenVPN connection.

Infrastructure

Pentest One Liners

A list of one line commands for Windows to download and execute payloads.

Infrastructure

Credential Interception Using Malicious SMB Shares

How to intercept NTLM-SSP hashed credentials for offline cracking.

Infrastructure

Casino Royale CTF

A walkthrough for VulnHub’s Casino Royale CTF.

Security Engineering

Software Restriction Policies

Configuring Software Restriction Policies (SRP) in Windows 10.

Infrastructure

GoldenEye CTF

A writeup of the VulnHub GoldenEye capture the flag (CTF) challenge.

Infrastructure

Extracting Windows Credentials Using Native Tools

How to extract credentials from Windows systems using built in commands.

Infrastructure

Kerberoasting

Kerbroasting to extract service account credentials.