Archives
- 16 Mar Creating environments for researching vulnerabilities with Digital Ocean
- 15 Mar Get started with Digital Ocean (DO) Droplets (VPS)
- 25 Oct Wordpress About Author <= 1.3.9 Authenticated Stored XSS
- 23 Oct Wordpress Groundhogg <= 2.0.8.1 Authentificated Reflected XSS
- 23 Oct Wordpress Groundhogg <= 1.3.11.13 Authentificated SQL Injection
- 23 Oct Wordpress Sliced Invoices <= 3.8.2 Authenticated SQL Injection
- 22 Oct Wordpress Sliced Invoices <= 3.8.2 Authenticated Reflected XSS
- 02 Jul Exploiting the xmlrpc.php on all WordPress versions
- 05 Feb [NeverLAN 2019] - Das Blog
- 05 Feb [NeverLAN 2019] - Things are not always what they seem
- 05 Feb [NeverLAN 2019] - SQL FUN 2
- 05 Feb [NeverLAN 2019] - SQL FUN 1
- 05 Feb [NeverLAN 2019] - Dirty Validate
- 05 Feb [NeverLAN 2019] - Console
- 05 Feb [NeverLAN 2019] - Cookie Monster
- 11 Dec [OtterCTF 2018] - Birdman's Data Writeup
- 11 Dec [OtterCTF 2018] - Otter Leak Writeup
- 10 Dec [OtterCTF 2018] - ReCurse Writeup
- 08 Dec AttackDefense.com [RCE] - CVE-2018-9037 Exploit
- 02 Dec AttackDefense.com [MSF] - Meterpreter Basics
- 02 Dec Metasploit Cheat Sheet
- 01 Dec AttackDefense.com [RCE] - WeBid
- 26 Nov AttackDefense.com [LFI] - CVE-2018-12613 Exploit
- 25 Nov AttackDefense.com [RCE] - CVE-2018-7448 Exploit
- 11 Nov AttackDefense.com [LFI] - CVE-2018-7422 Exploit
- 07 Nov CMS Made Simple 2.2.7 - Remote Code Execution
- 07 Nov MyBB Downloads 2.0.3 - SQL Injection
- 06 Nov AttackDefense.com [RCE] - CVE-2018-7466 Exploit
- 04 Nov AttackDefense.com [RCE] - CVE-2018-10517 Exploit
- 03 Nov AttackDefense.com [SXSS] - Concrete5 CMS
- 02 Nov AttackDefense.com [SXSS] - YetiForce CRM
- 01 Nov AttackDefense.com [PE] - Exploiting Setuid Programs II
- 01 Nov AttackDefense.com [PE] - Editing Gone Wrong
- 01 Nov AttackDefense.com [PE] - Permissions Matter!
- 28 Oct AttackDefense.com [RCE] - RPi Cam Control
- 28 Oct AttackDefense.com [RCE] - PHP Utility Belt
- 28 Oct AttackDefense.com [SXSS] - MyBB Downloads Plugin
- 28 Oct AttackDefense.com [SXSS] - ApPHP MicroBlog
- 27 Oct AttackDefense.com [SXSS] - Easy Appointments
- 26 Oct AttackDefense.com [ID] - CVE-2018-12604 Exploit
- 26 Oct AttackDefense.com [RCE] - osCommerce
- 26 Oct AttackDefense.com [RCE] - ApPHP MicroBlog
- 26 Oct AttackDefense.com [RCE] - Joomla com_xcloner Component
- 07 Oct [DCTF Quals 2018] Even more lucky?
- 06 Oct [DCTF Quals 2018] Lucky
- 06 Oct PHP Object Injection Cheat Sheet
- 30 Sep [DCTF Quals 2018] Message
- 29 Sep [DCTF Quals 2018] Broken TV
- 05 Sep eCPPT Gold Review
- 01 Aug Driftnet with ARP Poisoning
- 01 Aug Common Network Sniffing Tools
- 25 Jul Create a Tor Website in 5 minutes
- 25 Jul Msfvenom Cheat Sheet
- 23 Jul Midland CT590 frequency extender (RX/TX unlock)
- 16 Jul Exploit Exercises: Nebula Level 10
- 16 Jul Exploit Exercises: Nebula Level 09
- 16 Jul Exploit Exercises: Nebula Level 08
- 16 Jul Exploit Exercises: Nebula Level 07
- 16 Jul Exploit Exercises: Nebula Level 06
- 16 Jul Exploit Exercises: Nebula Level 05
- 16 Jul Exploit Exercises: Nebula Level 04
- 16 Jul Exploit Exercises: Nebula Level 03
- 16 Jul Exploit Exercises: Nebula Level 02
- 16 Jul Exploit Exercises: Nebula Level 01
- 16 Jul Exploit Exercises: Nebula Level 00
- 15 Jul [DCTF 2017] Working Junks Writeup
- 15 Jul [DCTF 2017] Security CCTV Writeup
- 15 Jul [DCTF 2017] State Agency Writeup
- 15 Jul [DCTF 2017] hack-tac-toe Writeup
- 15 Jul [DCTF 2017] Fedora Shop Writeup
- 15 Jul Reverse Shells Cheat Sheet
- 12 Jul New beginnings!