Command-and-control (C2) is a core concept in red teaming and adversary simulation. It describes the communication channel through which an operator interacts with an agent running on a system. In...

TLDR ACL Misconfigure -> YAML input issue ![[Pasted image 20240927024141.png]] Part 1 # create .htpasswd file RUN htpasswd -bc /etc/apache2/.htpasswd admin TEST_PASSWORD index.php have nothing...

TLDR Techniques CTRL + s CTRL + o CTRL + p Windows + r CTRL + SHIFT + Escape (Task Manager) runas /user:admin cmd.exe (For Priv Esc if admin pass is known) Setup Messing With F1 button M...

Quick dirty bash script that generate list of possible usernames based on given full name Example of accepted full name : John Jammond John.Jammond #!/bin/bash # Check for help flag or inc...

The Story Another week , another ctf , this time i was abit occupied with some issues , only managed to join after the CTF ended. TLDR 404 -> XSS -> Bypass CSP -> CSRF index.html <scri...

The Story So.. This weekend my friend , Alvin decided to pull me back into playing web ctf and knowing that i am quite washed , i decided to give it a go and the rest is history below. TLDR Reflect...

So.. I was looking for a fast port scanner , and came across many different port scanner such as rustscan , masscan , zenmap but ultimately most port scanner uses almost same function as nmap. The...