Linux Privilege Escalation During an engagement, if we got the access for the low privilege user in the linux environment then it might be necessay to escalate our privilege to other user it mig...

WEP honeypot Its type of decoy wireless network designed to attract and detect malicious activities, typically targeting attackers who exploit weak security protocols. Since the WEP is an vulner...

Reconnaissance Wi-Fi reconnaissance is the process of identifying and exploiting wireless networks. Using reconnaissance we can identify the unauthorized access points (rogue APs) or malicious d...

Wi-Fi networks are often more exposed than wired ones, making them a prime target for attackers. It will be an serious threat to organisation, if the actors target the users personal and organsat...

We can access the AWS environment via UI dashboard or also via Command Line Interface. Following were the list of command line and its usage on the AWS. To access the UI environment we shoud know ...

Cross Site Request Forgery is an vulnerability which can be easily understood and exploited in the web application. And it can be found on most of the sites due to the misconfiguration. So most ...

Windows In this post i worked on the windowsinternals and how the normal windows processes look like, so that we can identify between the normal and malicious processes on system. Windows is in on...

Hello World As a security analyst/cyber security person we might know about MITRE as a framework, but the actual intent of MITRE is safety,stability and well-being of nation(includes cyber space, ...

Containers Containers are just a process (or a group of processes) running in isolation, which is achieved with Linux namespaces and control groups. Linux namespaces and control groups are features...

Yay its a post about SQLi. As per the OWASP Top 10 2017 it is a positioned as 1 and Rank 6 according to SANS TOP 25 of 2019. SQLi attack makes it possible to execute malicious SQL statements. Th...