Exploit PATH variable manipulation for root access: Hijack binaries, abuse relative paths, and bypass security restrictions.

On a typical red team assessment, a redirector is a crucial part of the infrastructure in use. A redirector is basically a box that sits out on the internet (usually in some type of cloud service provider’s network) and forwards traffic for the red team so…

Empresa de Mark Zuckerberg usa técnicas que permitem acompanhar os movimentos do cursor na tela do seu computador

It is all too often that I am enlisted to perform a penetration test for a client, gain access to the internal network, and compromise the…

Nesse artigo vamos aprender como editar as preferências do mais poderoso editor de textos embutido no terminal, o Vim.

Ofuscação de Códigos A ofuscação de um código pode ser definida como um conjunto de técnicas que dificultam a legibilidade ou análise do código-fonte ou da execução de um programa. Simplificadament…

A little post-exploit tool that carefully clean *NIX access logs - GitHub - evilpan/hidemyass: A little post-exploit tool that carefully clean *NIX access logs

Default passwords from CIRT website (https://cirt.net/passwords) - cirt_default_passwords.md

Penetration Testing and Red Team Assessments both have strengths and weaknesses and are more suited to specific circumstances. Learn more.

Uma vez que um invasor ganha acesso administrativo em um sistema (e há inúmeras maneiras disso acontecer), ele ganha também a capacidade de…

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras - Varbaek/xsser

This weekend I and @shrimpgo decided to try some CTF, noticed that N1CTF2018 are running. Quickly joined and there's a lot of challenges, but this unsolved easy php called our attention. I doubt it was easy, several hours of CTF had already passed and it…