Collaborate Disseminate
I am looking for a good certification in security, but there are a lot of certificates.
The security vendors I’ve seen so far are OffSec, GIAC/SANS, ISC2, Comptia, and EC-Council. Each vendor has a variety of certifications.
I want the ce… Continue reading What are the best professional certificates for a software security [closed]
I have been a programmer/coder/developer for 3 years. I have knowledge of programming well and especially about Web App Technologies. Now I want to learn ethical hacking for OSCP Certification. I am learning networking fundamentals from fr… Continue reading I have been developer/programmer ,now want to learn hacking ? Currently learning networking and hacking free resources, Got Stuck! [closed]
Background
Currently prepping for OSCP, and taking Tib3rius’s course on Linux Privilege Escalation.
When working with one of the exercises in privilege escalating by enumerating and exploiting vulnerable SUID/SGID programs. The instructor … Continue reading Privilege Escalation – SHELLOPTS and PS4 exploitable conditions
On February 11, 2020, Offensive Security introduced a major overhaul and update to their already fantastic course: Penetration Testing with Kali Linux. Those changes included updates to their lab environment. The study materials were substantially upda… Continue reading More Lessons Learned About Trying Harder and Passing the Offensive Security Certified Professional Exam (OSCP)
So I’m trying to set up a ova box using VMBOX. I am importing the appliance, which is a .ova file. I then encounter this error:
Result Code:
VBOX_E_INVALID_OBJECT_STATE (0x80BB0007)
Component:
ApplianceWrap
Interface:
IAppliance {86a98347… Continue reading How do I get rid of this error VBOX_E_INVALID_OBJECT_STATE (0x80BB0007)? [migrated]
I’ve completed kioptrix level 2 challenge via sql injection, command injection, bash reverse shell, and local privilege escalation as part of my OSCP preparation.
https://www.vulnhub.com/entry/kioptrix-level-11-2,23/
; bash -i >& … Continue reading Kioptrix 2: Why netcat reverse shell executed in web browser via command injection bug doesn’t work?
I have got a reverse shell from a remote server and i need to upgrade it to an interactive shell. However there is no python installed in the remote server to spawn a PTY. Can anyone suggest me what are the other options avai… Continue reading How to upgrade reverse shell to an interactive shell when no python is installed? [on hold]
“OSCP is not about clearing the exam. It’s all about working deeply on labs.” –Ramkisan Mohan (Check out his detailed guide to OSCP Preparation) I began my OSCP journey in the late fall of 2018. So far, I’ve rooted 23+ mac… Continue reading Journey to OSCP -10 Things You Need to Know
I’m trying to develop an already existing exploit for Windows XP.
All DLL’s are protected by ASRL, so I used an address in ultraiso.exe, but all addresses start with NULL-bytes.
So far, I followed the tutorial here. Everyth… Continue reading What does this opcode in my exploit code mean?
In episode 87 of our monthly show, frequent guest Kevin Johnson joins us to discuss the current state of cybersecurity training and certifications. If you’re currently in the industry or pursuing a career in cybersecurity this is one episode not … Continue reading The State of Cybersecurity Training and Certifications with Kevin Johnson