Collaborate Disseminate
On a pentest we found that a kerberos ticket under account name administrator was cached on one of the SQL database servers, which allowed us to steal the ticket, pass-the-ticket and log onto the domain controller. The logon type was remot… Continue reading What is a secure way to log onto the domain controller?
I have a BigIP target server and try to meassure the (average) rtt. Usually I do this with sudo hping3 -S -p 80 <target>.
hping3 works fine with the listed parameters for arbitrary hosts, but for this server – I know it’s a F5 BigI… Continue reading Hping3 not working on BigIP target server [migrated]
I’m currently scanning a network using OpenVAS / Greenbone Security Assistant installed on Kali Linux.
During the scan, multiple targets have crashed. This is obviously something I want to investigate. As I’m running the "Full and fas… Continue reading Identify crash-inducing NVT in OpenVAS
I need to pentest a Java application through webswing. webswing allows running a java application in a web browser but how to pentest this?
I didn’t find any documentation about this actually. With my HTTP proxy (burp), I can see that webs… Continue reading How to pentest a java application run through webswing?
I am working on the auto-routing functionality of Codeigniter 4 and I’d like to test it by sending some nasty exploit-type HTTPS requests to make sure it properly resists mischief. E.g., request a uri with .. in the path to see if we might… Continue reading How to create custom exploit https requests to test a PHP framework
I need to buy a laptop for creating a virtual machine and having Kali and/or Parrot OS on VM. My main OS will be Windows. This is for pentesting. So, are we good with buying a laptop with Ryzen processors rather Intel. I have read on lot o… Continue reading Installing Parrot/Kali virtual machines on Ryzen processor (with Windows as my main OS) [migrated]
Suppose a website is logging out the user after some time to re-create the session and start using the website. As the security tester, how will you handle this situation? Isn’t it frustrating? Yes! looking from a security perspective this… Continue reading How to handle as a Tester if the website is kicking out the user for recreating the session?
I found a clickjacking issue in a site and the site security team said me that i would require unusual user interaction. So I wrote a code above the iframe but I was not successful in achieving it.
The site had two sensitive buttons which … Continue reading Automating Clickjacking Attack
Security alarm is being jammed or is someone entering through network firewall and sending packet information? Do I install Google Mesh for a Map that blocks out bad traffic? Do I install an additional firewall in addition to cable? … Continue reading security alarm/ network compromised
I’ve analyzed an app where I’ve found different vulnerabilities.
I could upload/overwrite, delete and download anything. All critical vulns, but I didn’t know how I could get rce without making damages. I thought that I could replace the e… Continue reading RCE on a server running nodejs