Professional penetration tester and red teamer. Malware research enthusiast. Alphabet soup: OSCP, eWPT, PJMR
I am available for mentoring! I can help you figure out all the nuances of breaking into the field of cyber security.
Jun 8, 2023 · 7 min read · In late February 2023, TCM security launched their brand-new certificate - Practical Junior Malware Researcher (PJMR, I called it pajamas). In this blogpost I wanted to share my experience of taking the exam for this certification, and what it feels ...
Join discussion
Sep 12, 2022 · 5 min read · Objective strace the binary at /home/flag15/flag15 and see if you spot anything out of the ordinary. You may wish to review how to “compile a shared library in linux” and how the libraries are loaded and processed by reviewing the dlopen manpage in ...
Join discussion
Jul 25, 2022 · 2 min read · Objective This program resides in /home/flag14/flag14. It encrypts input and writes it to standard output. An encrypted token file is also in that home directory, decrypt it :) To do this level, log in as the level14 account with the password level1...
Join discussion
Dec 7, 2021 · 2 min read · This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how a Remote Code Execution vulnerability can be identified and exploited and what an attacker can gain from it. Objective This lab contains a vuln...
Join discussion
Dec 3, 2021 · 1 min read · This is a writeup for a challenge from PortSwigger's Web Security Academy. In this one, we will learn how a DOM Cross Site Scripting (XSS) vulnerability works, how it can be exploited and what an attacker can gain out of it. In the previous writeups ...
Join discussion
