PermX
Posts by Tag
- eWPT 5
- PHP 2
- Apache 2
- FTP 2
- SSH 2
- HTTP 2
- OSWE 2
- Information Leakage 2
- Subdomain Enumeration 2
- Metasploit 2
- eJPT 2
- Web Site Structure Discovery 1
- Cookie Manipulation 1
- SUID Exploitation 1
- Authentication bypass 1
- Arbitrary File Upload 1
- Path Hijacking 1
- Vulnerability Assessment 1
- Databases 1
- Custom Applications 1
- Protocols 1
- Source Code Analysis 1
- PostgreSQL 1
- Reconnaissance 1
- Password Cracking 1
- SUDO Exploitation 1
- SQL Injection 1
- Remote Code Execution 1
- Clear Text Credentials 1
- Anonymous/Guest Access 1
- Apache OFBiz EXploitation (Authentication Bypass) 1
- ANalysis of OFBiz code to understand the hashed storage mechanism 1
- Adapating found hashes to a crackable format 1
- Cracking Hashes [Privilege Escalation] 1
- Docker 1
- Jenkins Exploitation CVE-2024-23897 in order to read arbitrary files (RCE) 1
- Cracking Hashes (Hashcat) 1
- Abusing the Jenkins cipher to crack the password [Privilege Escalation] 1
- Abusing declared Javascript functions from the browser console 1
- Abusing the API to generate a valid invite code 1
- Abusing the API to elevate our privilege to administrator 1
- Command injection via poorly designed API functionality 1
- Privilege Escalation via Kernel Exploitation (CVE-2023-0386) - OverlayFS Vulnerability 1
- OSCP 1
- LFI through CV Download 1
- Abusing ViewState IIS Parameter + web.config secrets to achieve RCE 1
- Playing with ysoserial.net to create a serialized payload 1
- Reading a powershell credential and decrypting the contents of the PSCredential object 1
- RunasCs.exe to execute command as another user whose credentials are known to us 1
- Abusing SeDebugPrivilege [Privilege Escalation] 1
- Samba 3.0.20 < 3.0.25rc3 - Username Map Script [Command Execution] 1
- GitHub Pages 1
- Jekyll 1
- Ruby 1
- Bundler 1
- Desarrollo web 1
- Markdown 1
- Linux 1
- Web Enumeration 1
- PCAP Analysis 1
- CVE-2024-21413 1
- CVE-2023-2255 1
- nmap 1
- hashcat 1
- john 1
- responder 1
- evil-winrm 1
- podman 1
- crackmapexec 1
- swaks 1
- netcat 1
- smbclient 1
- nishang 1
- libreoffice 1
- powershell 1
- smb 1
- smtp 1
- ntlm 1
- ws-management 1
- Chamilo LMS Exploitation 1
- Unauthenticated Command Injection [CVE-2023-31803] (RCE) 1
- Abusing Sudoers 1
- Custom Bash Script (playing with setfacl) [Privilege Escalation] 1
eWPT
PermX
Pov
TwoMillion
PHP
Apache
FTP
SSH
HTTP
OSWE
Pov
TwoMillion
Information Leakage
PermX
TwoMillion
Subdomain Enumeration
PermX
Pov
Metasploit
Pov
eJPT
Web Site Structure Discovery
Cookie Manipulation
SUID Exploitation
Authentication bypass
Arbitrary File Upload
Path Hijacking
Vulnerability Assessment
Databases
Custom Applications
Protocols
Source Code Analysis
PostgreSQL
Reconnaissance
Password Cracking
SUDO Exploitation
SQL Injection
Remote Code Execution
Clear Text Credentials
Anonymous/Guest Access
Apache OFBiz EXploitation (Authentication Bypass)
ANalysis of OFBiz code to understand the hashed storage mechanism
Adapating found hashes to a crackable format
Cracking Hashes [Privilege Escalation]
Docker
Jenkins Exploitation CVE-2024-23897 in order to read arbitrary files (RCE)
Cracking Hashes (Hashcat)
Abusing the Jenkins cipher to crack the password [Privilege Escalation]
Abusing declared Javascript functions from the browser console
TwoMillion
Abusing the API to generate a valid invite code
TwoMillion
Abusing the API to elevate our privilege to administrator
TwoMillion
Command injection via poorly designed API functionality
TwoMillion
Privilege Escalation via Kernel Exploitation (CVE-2023-0386) - OverlayFS Vulnerability
TwoMillion
OSCP
Pov
LFI through CV Download
Pov
Abusing ViewState IIS Parameter + web.config secrets to achieve RCE
Pov
Playing with ysoserial.net to create a serialized payload
Pov
Reading a powershell credential and decrypting the contents of the PSCredential object
Pov
RunasCs.exe to execute command as another user whose credentials are known to us
Pov
Abusing SeDebugPrivilege [Privilege Escalation]
Pov
