Surya Dev Singh

Published in InfoSec Write-ups

·Pinned

BITB (browser in the browser)Attack

make phishing nearly undetectable using BITB attack !! ✅ what is the BITB attack? BITB attack browser in the browser attack is an advance and more sophisticated phishing attack that can trick users into believing the fake website is real. it actually works on making users believe a fake SSO window is real. not clear? ok…

Phishing

4 min read

Published in System Weakness

·Pinned

Dirty Pipe: CVE-2022–0847 [TryHackMe]

tryhackme walkthrough for Interactive lab for exploiting Dirty Pipe (CVE-2022–0847) in the Linux Kernel ✔️ introduction for DiryPipe CVE-2020–0847 In March 2022, a researcher named Max Kellerman publicly disclosed a Linux Kernel vulnerability (nicknamed “Dirty Pipe” for its similarities to the notorious “Dirty Cow” exploit affecting older versions of the kernel) that allowed attackers to…

Tryhackme

9 min read

Published in System Weakness

·Pinned

Attacktive Directory — Exploitation of Vulnerable Domain controller [TryHackMe]

99% of Corporate networks run off of AD. But can you exploit a vulnerable Domain Controller? ✔️ task 1 intro [deployment] its all about deployment !! ✔️ task2 intro [setup] Installing Impacket: git clone https://github.com/SecureAuthCorp/impacket.git /opt/impacket pip3 install -r /opt/impacket/requirements.txt cd /opt/impacket/ && python3 ./setup.py install Installing Bloodhound and Neo4j apt install bloodhound neo4j apt update && apt upgrade

Red Team

9 min read

Attacktive Directory — Exploitation of Vulnerable Domain controller [TryHackMe]

Pinned

TryHackMe’s Pre Security Path for beginners

get started with your cyber-security journey with TryHackMe what is Pre Security Learning Path? Before hacking/testing the security of something, you first need to understand the basics of the underlying technology. well, tryhackme’s pre-security path will help you. 👉 create your TryHackMe account from here 👉 access the pre-security learning path from here Pre Security learning…

Tryhackme

2 min read

Published in System Weakness

·Jun 21

Year of the Pig TryHackme WriteUp

some pigs do fly….. Tryhakcme writeup for “year of the pig” ✅ information gathering NMAP : ╭─root@kali ~ ╰─➤ nmap -sV -sC -T 5 10.10.192.16 -A Starting Nmap 7.92 ( https://nmap.org ) at 2022-06-11 03:28 EDT Stats: 0:00:14 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan Service…

Pentesting

12 min read

Published in InfoSec Write-ups

·Jun 10

Brainpan 1 WriteUp Tryhackme

Reverse engineer a Windows executable, find a buffer overflow, and exploit it on a Linux machine. Information Gathering Nmap : ╭─root@kali ~…

Cybersecurity

8 min read

Published in System Weakness

·May 15

Vulnversity WriteUp

Learn about active recon, web app attacks, and privilege escalation techniques ✅ Information Gathering / Reconnaissance RustScan rustscan -a <ip> --ulimit 5000

Pentesting

6 min read

Published in System Weakness

·Apr 12

Nmap — The Complete Guide [Part 1]

reconnaissance with Nmap — the complete guide hello everyone, Surya dev Singh here !! in this article, we will be learning the complete use of NMAP for reconnaissance and offensive pen-testing. ✅ things we will be learning : introduction to Nmap Nmap switches scan types TCP connect scan SYS scan UDP scan ICMP network scanning (ICMP, ARP) …

Penetration Testing

8 min read

Published in System Weakness

·Mar 28

Aratus TryHackMe Walkthrough

Do you like reading? Do you like to go through tons of text? Aratus has what you need! Hello, let's get started !!!! ✔️ Information Gathering Rust-scan

Tryhackme

8 min read

Published in InfoSec Write-ups

·Mar 21

Baron Samedit CVE-2021–3156 [TryHackMe]

A tutorial Walkthrough for exploring CVE-2021–3156 in the Unix Sudo Program. Deploy the machine and ssh into the machine use username:tryhackme password:tryhackme In January 2021, Qualys released a blog post detailing a terrifying new vulnerability in the Unix Sudo program. Specifically, this was a heap buffer overflow allowing any user…

Tryhackme

3 min read