@Zink0x00

Nairuz Abulhul

@Zink0x00Joined December 2021

I spend 70% of the time reading security stuff and 30% trying to make it work !!! aka Pentester >>Security Researcher

Website

About

Nothing here yet.

Available for

Nothing here yet.

Nairuz Abulhul's blogs

r3d-buck3tr3d-buck3t.hashnode.dev4 posts

freeCodeCamp Englishfreecodecamp.org/news3 posts

Virtual Host Enumeration – How to Uncover Hidden Web Assets

When performing external penetration testing or bug bounty hunting, security experts explore the targeted system from various angles to collect as much information as possible and identify potential attack vectors. This involves identifying all the a...

Dec 13, 2023 · 10 min readfreecodecamp.org

Exploiting CORS – How to Pentest Cross-Origin Resource Sharing Vulnerabilities

All web browsers implement a security model known as the Same-Origin Policy (SOP). It restricts domains from accessing and retrieving data from other domains’ resources. The SOP policy helps protect users from malicious scripts that could access the...

Mar 9, 2023 · 12 min readfreecodecamp.org

Play with Hashes — Over Pass The Hash Attack

After compromising a domain user on the network, the next step is to gather all usernames, hashes, sensitive information, and anything that helps pivot to other machines within the network. Of course, we must keep in mind that extracting these types ...

Jan 29, 2022 · 5 min readr3d-buck3t.hashnode.dev

Enumerating Domain Trusts in Active Directory

Domain Trusts are relationships that allow communications between domains within one forest or multiple forests. In an Active Directory environment, these relationships allow users and groups to share resources within the organization’s networks. Som...

Jan 23, 2022 · 4 min readr3d-buck3t.hashnode.dev

Enumerating Access Controls in Active Directory

Access Controls are a set of permissions given to an object. In an active directory environment, an object is an entity that represents an available resource within the organization’s network, such as domain controllers, users, groups, computers, sha...

Jan 19, 2022 · 6 min readr3d-buck3t.hashnode.dev

Nairuz Abulhul

About

Available for

Nairuz Abulhul's blogs

Virtual Host Enumeration – How to Uncover Hidden Web Assets

Exploiting CORS – How to Pentest Cross-Origin Resource Sharing Vulnerabilities

Play with Hashes — Over Pass The Hash Attack

Enumerating Domain Trusts in Active Directory

Enumerating Access Controls in Active Directory

Search Hashnode

Nairuz Abulhul

About

Available for

Nairuz Abulhul's blogs

Virtual Host Enumeration – How to Uncover Hidden Web Assets

Exploiting CORS – How to Pentest Cross-Origin Resource Sharing Vulnerabilities

Play with Hashes — Over Pass The Hash Attack

Enumerating Domain Trusts in Active Directory

Enumerating Access Controls in Active Directory