Today, we will discuss serialization and the risks associated with this technique. Serialization is a common technique used in software development to convert complex objects into a format that can...
Conceal was an engaging box to delve into advanced exploitation techniques involving VPN configurations and Windows privilege escalation. The process began with thorough information gathering, sta...
Surveillance was a complex and challenging box that required multiple exploitation techniques, including leveraging vulnerabilities in CraftCMS and ZoneMinder, along with performing lateral movemen...
ClamAV was an insightful box to explore exploitation techniques for services like ClamAV-Milter. The process started with comprehensive information gathering, including a full port scan revealing ...
Exfiltrated was a well-structured box that provided an excellent opportunity to exploit a Subrion CMS vulnerability and perform privilege escalation via an Exiftool exploit. Initial enumeration le...
Twiggy was an insightful machine focused on exploiting a SaltStack vulnerability. The machine required initial enumeration to identify open services, followed by a specific focus on the web servic...
Squid was a challenging box that involved utilizing a Squid proxy to discover internal services, exploiting a phpMyAdmin file upload vulnerability to gain initial access, and then escalating privil...
Fractal was an extremely useful box to learn and train my MySQL skills. It starts with identifying a Symfony CMS through HTTP enumeration. The Symfony profiler was explored, leading to finding sen...