정적 포트포워딩을 이용한 공격
Static port forwarding을 이용하여 타겟단말의 정보 취득
By Hong
시나리오
최종목표를 SMB서버에 접속해서 파일을 확인하고 다운로드하는 것으로 했을 때,
[Read More]
-
-
Wildcard(*) 인젝션에 대하여
tar와 와일드카드를 이용한 취약점
By Hong
와일드카드(*)를 이용한 권한상승 취약점에 대한 설명글. [Read More] -
Automate the Boring Stuff with Python Practical Programming for Total Beginners.
Summary of the Python textbook.
By Hong
Finding Patterns of Text with Regular Expressions [Read More] -
Linux basics for hackers
Summary of the textbook linux basics for hackers
By Hong
Text manipulation [Read More] -
Hack The Box - Cap
Hack the box Cap machine writeup
By Hong
nmap PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 3.0.3 22/tcp open ssh OpenSSH 8.2p1 Ubuntu 4ubuntu0.2 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 3072 fa:80:a9:b2:ca:3b:88:69:a4:28:9e:39:0d:27:d5:75 (RSA) | 256 96:d8:f8:e3:e8:f7:71:36:c5:49:d5:9d:b6:a4:c9:0c (ECDSA) |_ 256 3f:d0:ff:91:eb:3b:f6:e1:9f:2e:8d:de:b3:de:b2:18 (ED25519) 80/tcp open http gunicorn |_http-server-header: gunicorn |_http-title: Security Dashboard | fingerprint-strings: | FourOhFourRequest: | HTTP/1.0... [Read More]