-
Featured
A Simple Guide to Getting CVE’s
Written by @hyd3sec and boku So you found a vulnerability and you want to get a CVE? SWEET! Make sure that the vulnerability doesn’t already exist. That’d be lame if you went through all this work only to find it’s already out there… but still kudos to you for finding it! The only place you… Read more
-
Featured
OSCP – HacktheBox List
In preparation for the OSCP, these are the boxes that I went after (in this order) after my first failed exam attempt. This list is mostly based on TJ_Null’s OSCP HTB list. There’s 39 boxes in this list, but this is a great example of trying ‘harder’ and going beyond the course material. I watched… Read more
-
Featured
OSCP – Exam Day ( -1 +1 )
Exam day -1 The day before the exam I really didn’t do much. I spent maybe an hour on the computer and that was just organizing folders on my VM, making sure I had OneNote organized (that’s what I planned to use to take notes, organize screenshots, etc.). I printed out a visual affirmation and… Read more
-
Jerry – No Metasploit
Yeah… that’s definitely not the Jerry I remember from Tom and Jerry. Anyway, let’s get started with our usual portscan: Okay. Let’s look at some other enumeration scans, namely gobuster on port 8080 and nikto: Hmm. Ok interesting… So we can use PUT and place a malicious file on the server…? But let’s see if… Read more
Follow My Blog
Get new content delivered directly to your inbox.