BDBibek Dhunganainblog.bdhungana.com.np·Feb 15, 2025 · 17 min readLinux Privilege EscalationIf you are a pentester, CTF player or anyone who loves to pwn stuffs you might have gain the shell access to the linux servers at some time. Is it the dead end now? Hell, no. when it’s come to post exploitation, there is some much to cover. Below is ...00
BDBibek Dhunganainblog.bdhungana.com.np·Nov 6, 2024 · 6 min readAWS Cognito MisconfigurationIf you are the pentester dealing with the modern web applications you might have faced the use of congnito in your assessments or you might have watched the awesome video of the Yassine Aboukir. A big shoutout to yassine for the awesome talk. This bl...00
BDBibek Dhunganainblog.bdhungana.com.np·Aug 15, 2024 · 14 min readActive Directory AssessmentActive Directory Overview What is Active Directory? Directory service developed by Microsoft to manage Windows domain networks. Stores information related to objects, such as Computers, Users, Printers, etc. Think about it as a phone book for Win...00
BDBibek Dhunganainblog.bdhungana.com.np·Feb 10, 2024 · 5 min readCRTP Course & Exam ReviewIntro I signed up for the CRTP course during the Diwali sale which costs me $199 that includes the lifetime access of the course materials, 30 days lab access & one exam certification attempt. Course & Lab As I already have background of pwning acti...00
BDBibek Dhunganainblog.bdhungana.com.np·Dec 23, 2023 · 2 min readInternal Domain Admin Credentials Leaked in GitHubIn the month of march, I was learning bit more about github dorking. I was going through writeups, blogs, videos to learn about it. After spending some time, there was a itch inside me forcing me to try it in the real world target. Then I searched fo...00
