In this blog post we will learn what is Deserialisation .Why we need it .How it works and how can we abuse it.All in the context of java. What is deserialisation: If you google deserialisation it says Deserialisation is the process of reconstructing a data structure or object from a…

This article is all about pentesting JWT. You can practice all of these techniques on vulnerable target availabe at burp Suite webacademy labs. I will try to make the article as easy as possible and will try to make you understand in very layman language. What is JWT: JWT is…

This Box requires exploiting a memory corruption bug to gather information that can be used in the further movement to get the initial foothold.And then we need to perform a tmux session hijacking to become GOD. Initial Foothold We started with nmapAutomator for the initial port scan and found few…

This box needs credential brute forcing ,password guessing and an CVE exploitation to get in and again exploiting an CVE via cronjob to get god access.So lets get started. Initial Foot Hold: We started with nmapautomator to discover the open ports and map the attack surface.

Hackthebox retired Box Init Foothold We started our recon with nmap automator which showed some of the open ports. Upon running the full scan we saw port 60000 is open with custom web app.

Offsec PG Practice INIT FOOTHOLD: I started my recon with nmap automator and found few of the ports open . As you can see nmap initial port scan says only port 22 to be open that too also openssh 7.9p1 which dont have any public exploit to give an rce. …

Hackthebox INIT FOOTHOLD I started my recon with nmap automator and got following ports to be open. So I headed over to port 80 to enumerate the web app. It was almost a static page with only portal working.

Offsec PG practice INIT FOOTHOLD: I started my recon with nmap automator( as it automates a lot of nmap job and and also ffuf job) and we got From initial nmap report we can see there are only 21,22,80 ports are running. I tried anonymous login on ftp but it…

Init Foothold As usual we started a service discovery with nmap and found the following services to be open. As we can see there are couple of ports open but out of them port 80 22 and 8888 seems be the highest attack surface. So we started exploring the port…