SQLMAP is good tool and we will have us a cheatsheet to use sqlmap in CTF and OWSP .
systems and security|
A note like a broken electrical pulse hum
post @ 2022-04-24
post @ 2020-12-25
The good doctor has some interesting higher ports open .
post @ 2020-12-24
Web pages use template engines to render dynamic data . Improper sanitization of user input could lead to Server Side Template Injection . Unlike XSS , Template injection can be used to directly attack web servers’ internals and even get Remote Code Execution .
post @ 2020-12-21
Devil is in the detail. He literally is , not kidding . Once limited shell is established on the system its a good idea to escalate privileges . Because why wont you ?
post @ 2020-12-20
For discovering as much information about the web server once found, we need to bruteforce URLs, DNS subdomains and virtual hosts.
post @ 2020-12-20
The motivation behind CTF Methodology - Network Reconnaisance post is to keep a cheat sheet of all scanning methods that come in handy while starting the Reconnaisance phase for a CTF or a lab box . Will try to keep this list updated as new boxes teach new scanning methods .
post @ 2020-12-19
Natas is a web based wargame at over the wire (OTW). Have tried to use both python and burp method wherever applicable while solving the levels .
post @ 2020-12-19
There is an encrypted file and a txt file with a job post for web developer provided in the zip file along with a breached data dump of info about everybody who applied to the job .
post @ 2020-12-19
There is a balding scientist fiddling with a beaker in the picture. Regardless starting with the machine by firing it up and noting its ip address .
post @ 2020-12-14
Port 80 has the PRTG Network Monitor running .