DC-1: Drupalgeddon2, SUID binary to root shellFull DC-1 walkthrough: Drupal exploitation, a misleading password hint, brute forcing SSH, and a SUID find binary for root access.15 min read·0xk4m1.hashnode.devOct 5
I_Sniff // MiTM packet takeover using ARP spoofing with a tool I createdunderstanding how packets move between hosts and the gateway and taking advantage of it9 min read·0xk4m1.hashnode.devAug 14
Gaining root access on a vulnerable Linux server using a 20 year old bug / Kioptrix 1 exploitation.Using the intelligence from the recon and enumeration phase to gain root shell access. Two paths are used here, a manual exploit and Metasploit.5 min read·0xk4m1.hashnode.devJul 20
Scoping out a Linux server / Kioptrix 1 Recon and Enumeration.Mapping out the attack surface before running any exploits8 min read·0xk4m1.hashnode.devJul 19
ipsweep.sh // A host discovery recon tool on a /24 networkA /24 IP sweep from scratch in Bash. Built without using Nmap, just ping and grep.4 min read·0xk4m1.hashnode.devJul 3
