HTB - Shibboleth Writeup
πΎ Machine OverviewThis is a writeup of the machine Shibboleth from HTB, itβs a Medium difficulty Linux machine which featured IPMI hash retrieval, a Zabbix CVE, and a MariaDB CVE. π EnumerationAn...HTB - Facts Writeup
πΎ Machine OverviewThis is a writeup of the machine Facts from HTB, itβs an easy difficulty Linux machine which featured a CVE in Camaleon CMS, S3 Bucket enumeration, SSH Key shenanigans, and some ...PacketHuffer: Making Sense of Kismet Data
The primary motivations of PacketHuffer are to ease the struggle of dealing with multiple Kismet captures, implement out of the box rules/detections for items of interest a-la BloodHound, and add flexibility for the easy viewing and analysis of wireless recon data. PacketHuffer takes information from batches of kismet files, extracts the wireless devices, and provides a de-duplicated/concise view of identified networks.
Vulnlab - Tengu Writeup
πΎ Machine OverviewThis is a writeup of the chain Tengu from VulnLab, itβs a medium difficulty Windows chain which featured NodeRED exploitation, pivoting, and some standard AD attacks. π Enumerat...Vulnlab - Tea Writeup
πΎ Machine OverviewThis is a writeup of the chain Tea from VulnLab, itβs a medium difficulty Windows chain which featured CI/CD pipeline exploitation, LAPS2, and WSUS. π EnumerationAn initial...A Student-Run Pentest: CCSO X HAX
My first 7 CVEs; Organizing and running a student-run pentest of the HAX CMS webapp.
π§π WarWandering: Pt 2
Part two of my wardriving project. Ingesting Kismet data into Elastic for analysis and Visualization.
Vulnlab - Trusted Writeup
πΎ Chain OverviewThis is a writeup of the chain Trusted from VulnLab. This chain was a lot of fun and dealt with some common web attacks, DLL hijacking, and AD trust exploitation. π EnumerationI s...Vulnlab - Baby2 Writeup
πΎ Machine OverviewThis is a writeup of the machine Baby2 from VulnLab, itβs a Medium difficulty Windows machine which features some fun with logon scripts, as well as some basic AD and GPO abuse. ...Vulnlab - Retro2 Writeup
πΎ Machine OverviewThis is a writeup of the machine Retro2 from VulnLab, itβs an Easy difficulty Windows machine which featured xyz techniques. π EnumerationI started off with an Nmap scan of the ...