Search

ai-agents, agent-security, llm-security, architecture, mcp, rag

A security-first guide to agent taxonomy, the execution loop, tools, memory, RAG, MCP, orchestration, and the trust boundaries that matter.

WSL, Windows API, Incident Response, HTB

Forela Corporation heavily depends on the utilisation of the Windows Subsystem for Linux (WSL), and currently, threat actors are leveraging this feature, tak...

Applications and Services Logs, Incident Response, HTB

Torrin is suspected to be an insider threat in Forela. He is believed to have leaked some data and removed certain applications from their workstation. They ...

Sourcecode Review, Incident Response, HTB

Scenario

Log Analysis, Incident Response, CVE-2024-2879, BlueTeam Labs

Scenario

Base64, Powershell, Incident Response, Deobfuscate

Scenario

OWASP, SIEM, Incident Response, Splunk

In this walkthrough, we will delve into investigating web application logs using Splunk. We’ll explore a scenario where an attacker successfully compromised ...

WordPress Exploitation, Kernel Exploit 4.10.0-28-generic, Parameter Fuzzing, LFI

In this walkthrough, we will be exploiting this machine using WordPress. However, it is necessary to enumerate thoroughly to obtain the WordPress credentials...

SSH PortForwarding, VNCViewer, Decoding

In this walkthrough, we deep explore the robots.txt source code and find an encoded code. On decryption, it reveals a directory on the server that leads us t...

PHP File Upload, Sudo python3.5

Enumeration

Android, Es file Explorer

nmap2222/tcp open ssh (protocol 2.0)| fingerprint-strings: | NULL: |_ SSH-2.0-SSH Server - Banana Studio| ssh-hostkey: |_ 2048 71:90:e3:a7:c9:...

PHP 8.0.1 ZeroDay

```sudo nmap -sCV -p- -vvv 10.10.10.242

Wireshark

In this Walkthrough we’ll exploit this machine by inspecting the 0.pcap file which we can download from the network dashboard which is capturing the network ...

SUID find

In this walkthrough,FTP service lead us to enumerate information from hostinger user , which has a encryption todo list then from that information we’ll gain...

redis&ftp

In this walkthrough, we’ll gain remote code execution via a combination of the Redis MODULE LOAD command (which allows us to dynamically load a Redis module ...

LFI, Hydra SSH, gtfobin all

Summary

Hydra websiteBruteforce, sql map, PathHijacking Linux

Enumeration

gtfobin all

Cve that can bypass the admin password and login as admin with blank password , user sikly can run anything as root without password which gave us log into r...

Apache Tomcat, PortKnocking, LFI, cronjob

Nmap

BufferFlow

Fuzzing

wordpressExploit, Hydra websiteBruteforce, SSH PortForwording

nmap

John TheRipper, gtfobin yum

Nmap

Hydra websiteBruteforce, cronjob

nmap

hashcat, SSH PortForwording

nmap

Hydra websiteBruteforce, Process Exe Path Override

NmapPORT STATE SERVICE REASON80/tcp open http syn-ack3389/tcp open ms-wbt-server syn-ack

SeImpersonatePrivilege

Nmap

Rejetto HTTP File Server, unquoted paths

on port 8080 ftp vuln Server is running

ProFTP 1.3.5, PathHijacking Linux

cover accessing a Samba share, manipulating a vulnerable version of proftpd to gain initial access and escalate your privileges to root via an SUID

Exploiting FTP

nmap```nmap -p21,22,25,80,110,139,143,445,465,587,993,995 10.0.2.54 -sC -sV Starting Nmap 7.91 ( https://nmap.org ) at 2021-04-19 02:53 EDTNmap scan report f...

nmapStarting Nmap 7.91 ( https://nmap.org ) at 2021-04-18 06:48 EDTNmap scan report for 10.0.2.53 (10.0.2.53)Host is up (0.00014s latency).Not shown: 998 clo...

LFI, LDAP, gtfobin dpkg

Namp

LFI, SSHLog file Posioning, SSH PortForwording, SOCAT PortForwording, mysql

Nmap

SMB BruteForce, SMPT LogFile Posining, LFI, PathHijacking Linux

Enumerating the smb Which has Anonymous access , there user zeus kept attension.txt about poor passwd usage , using that creds , you can brutefore the helios...

SSH BruteForce, SSH PortForwording

Nmap

gtfobin sqlite3, .gitEnumeration

Nmap```22/tcp open ssh syn-ack OpenSSH 7.6p1 Ubuntu 4 (Ubuntu Linux; protocol 2.0)| ssh-hostkey: | 2048 2a:46:e8:2b:01:ff:57:58:7a:5f:25:a4:d6:f2:89...

LFI, Apache Tomcat with Curl, fcrack, lxd

Privilage Esclation

SSH BruteForce

Nmap

sqlmap, PathHijacking Linux, PHP File Upload

Nmap