Cyber Threat Intelligence is an area that is not well known outside of the cybersecurity industry, but is quickly growing in both popularity and importance. …

The deep web is the part of the internet that is not indexed by search engines. A part of the deep web is the dark web, which exists inside layered proxy networks, so-called darknets. Of these darknets, Tor is by far the largest. Dark Web Marketplaces are online shops termed…

When we talk about hardware hacking — we have physical device as attack surface, we have embedded devices to pentest on, One may try to start pentesting that piece of hardware by enumeration some useful information with the help of few tools will be listed below. By opening the casing…

Reverse engineering is the process of understanding the particular aspects of the program, which are listed below to identify the components of the system and the interrelationship between the components. And enhance the components of the system and improve the performance and scalability of the system (or) subsystem. Software reverse…

This article has been taken from 0xRick’s blog as a part of my notekeeping for OSCP. (Refer- https://0xrick.github.io/hack-the-box/querier/) Nmap As always we will start with nmap to scan for open ports and services : nmap -sV -sT -sC querier.htb

This article has been taken from absolomb’s security blog as a part of my notekeeping for OSCP.(Refer-https://www.absolomb.com/2018-05-04-HackTheBox-Tally/) As always an nmap scan to get us going. root@kali:~/htb/tally# nmap -A 10.10.10.59 Starting Nmap 7.50 ( https://nmap.org ) Nmap scan report for 10.10.10.59 Host is up (0.048s latency). Not shown: 992 closed ports PORT…

This writeup has been taken from IronHackers as a part of my notekeeping for OSCP.(Credits-https://ironhackers.es/en/writeups/writeup-falafel-hackthebox/) Enumeration As always, the first thing will be a port scan with Nmap: nmap -sC -sV 10.10.10.73

Kotarak is a Medium level Linux box on HTB which covers CSRF attack.It is also a part of TJ Null’s list of OSCP like machines but is rated more than oscp like.The information on this writeup has been taken from Rana Khalil’s writeup as a part of my notekeeping for…

Bart is a Medium Level but challenging Windows machine on HackTheBox.Here we use PHP log poisoning to gain initial access and privilege escalate via Autologon Credentials or by using Juicy Potato.Another tricky part of this box was password guessing and bruteforcing. ENUMERATION