HackTheBox Writeup - Reactor
Introduction Reactor is an Easy-rated Linux machine on HackTheBox that showcases a high-severity vulnerability in the Next.js framework. The exploitation involves an unauthenticated RCE via the Rea...
zahidoverflow
HackTheBox Writeup - Connected
Introduction Connected is a Season 11 Linux machine on HackTheBox that features a FreePBX installation. The exploitation path involves an unauthenticated SQL injection in the Endpoint Manager modul...
HackTheBox Writeup - Cap
Target IP: 10.10.10.245 Difficulty: Easy OS: Linux 1. Reconnaissance Nmap Scan PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 80/tcp open http Foothold Discovery The web server on port ...
Linux Privilege Escalation via Misconfigured SUID Binaries
SUID (Set User ID) is a special file permission in Linux that allows users to run a binary with the permissions of the file owner (often root). The Security Risk If a binary with the SUID flag has...
Integrating SAST and DAST in GitHub Actions Pipelines
Integrating security into the continuous integration/continuous deployment (CI/CD) pipeline ensures vulnerabilities are caught early in the development lifecycle. Static Application Security Testi...
Behavioral Analysis: Tracking Process Injection Techniques
Process injection is a evasion technique where malware runs malicious code in the address space of a legitimate Windows process (e.g., explorer.exe or svchost.exe). Classic API Sequence The most c...
A Primer on Buffer Overflows: Overwriting the Return Address
Buffer overflow remains a classic binary exploit vector. It occurs when a program writes more data to a buffer on the stack than the buffer is allocated to hold. Stack Layout & EIP Control The...
Hardening AWS IAM Policies: The Principle of Least Privilege
In cloud infrastructure, identity is the new perimeter. AWS Identity and Access Management (IAM) controls access to cloud resources, making policy hardening one of the most critical security tasks....
Introduction to Android App Decompilation and Analysis
Decompiling and reverse engineering Android applications (APKs) is a core step in mobile application security assessments. It allows engineers to inspect application logic, check for hardcoded secr...
Securing Modern Web Apps: A Guide to DOM-based XSS
DOM-based Cross-Site Scripting (DOM XSS) is a client-side vulnerability where the attack payload is executed as a result of modifying the DOM environment in the victim’s browser. Unlike reflected ...