Knowledge Base for Penetration Testing
Memory vulnerabilities are programmatic flaws in which the application improperly accesses or handles objects stored in memory. These vulnerabilities can result in memory corruption leading to arbitrary code execution or denial of service. Because memory exploits work outside the normal bounds of the operating system, many activities conducted during those exploits will not be logged. […]
Walkthrough of the checks for a security review of a GaussDB database.
Hacking misconfigured certificate templates to gain admin access within Active Directory.
Command reference and resources for reviewing the security posture of a Kubernetes infrastructuree.
Quickly build a simple reverse shell that evades Windows Anti-Virus (AV) detection using default Kali Linux tools. Mitigation recommendations are presented at the end of the article for defense fortification.
Various notes ranging from enumeration to building reverse shells for exploiting Microsoft SQL Server, MSSQL.
Add a new Directory to environment path variable, $PATH, in Kali Linux to help setup and easily run tools. The default shell of Kali Linux is now zsh.
Method 1: Python pty module One of my go-to commands for a long time after catching a dumb shell was to use Python to spawn a pty. The pty module let’s you spawn a psuedo-terminal that can fool commands like su into thinking they are being executed in a proper terminal. Spawn /bin/bash using Python’s PTY module, and connect the controlling shell […]
Quick easy steps to create a WordPress pugin that will give you a reverse shell.
Windows Patch Level Lists installed packages: Available Shares List open file shares: The default Windows shares are: C$, IPC$, ADMIN$ If these are present that is fine. If there are any more then investigate what they are and try to determine if they are sharing sensitive information. If you find it is sharing a CD-ROM […]
by