JJebitokinsharonjebitok.com路6d ago 路 21 min readFools Mate, Revenge (TryHackMe)Link to the challenge on TryHackMe: Fools Mate, Revenge Introduction I recently worked through a two-part TryHackMe room built around a deceptively simple web app: a chess "Endgame Trainer" with a mat00
YPYogeshwar Peelainexploitnotes.hashnode.dev路Sep 9 路 4 min readTryHackMe - CyberHeroes WriteupSummary CyberHeros is an easy-rated web challenge built on the iPortfolio Bootstrap template. The site advertises a "login page" challenge directly in its About section. Inspection of login.html revea00
JJebitokinsharonjebitok.com路Sep 9 路 2 min readCloud Security Fundamentals (TryHackMe)Link to the challenge on TryHackMe: Cloud Security Fundamentals nmap IP_Address PORT STATE SERVICE 22/tcp open ssh 8080/tcp open http-proxy 9000/tcp open cslistener curl http://IP_Address:900
JJebitokinsharonjebitok.com路Sep 6 路 20 min readChallenges: Grep (TryHackMe)Challenge on TryHackMe: Grep Introduction TryHackMe's Grep room bills itself as an OSINT challenge under the Red Teaming path, and that framing turned out to be the whole point. Coming into this box e00
JJebitokinsharonjebitok.com路Aug 29 路 56 min readSource Code Review: PHP (TryHackMe)Challenge on TryHackMe: Source Code Review: PHP Introduction Secure code review is the practice of reading an application's source code to find security flaws, understand why they exist, and judge how00
JJebitokinsharonjebitok.com路Aug 29 路 20 min readFools Mate (TryHackMe)Challenge on TryHackMe: Fools Mate t's mate in one. You know it, the engine knows it, my grandma knows it. The board says checkmate is one click away. The engine says no. Settle the argument. You can 10
KRKaustubh Raiinraikaustubh.com路Aug 20 路 5 min readThe BApp That Almost Worked: Building curl2repeater 馃敡There's always that one extension everyone has installed and nobody's actually checked. For BurpSuite, mine was Paste cURL to Repeater. I'd had it installed for months before I bothered actually looki30
GBGiliam Breemsinapexstuff.hashnode.dev路Jun 19 路 6 min readGenerating a bearer token with Curl using Oracle ORDS and the OAuth 2.0 Client Credentials flowIn this blog I cover the manual steps to resolve a valid bearer token from the OAuth Authentication Server that comes out-of-the-box with Oracle ORDS, a.k.a. Oracle REST Data Services. Nevertheless, t00
JJebitokinsharonjebitok.com路Jun 6 路 33 min readWeb Server Attacks - II (TryHackMe)Link to the Challenge on TryHackMe: Web Server Attacks - II Introduction IIS is installed on virtually every Windows Server running a web application, intranet portal, or REST API. Unlike standalone w81
JJebitokinsharonjebitok.com路Jun 6 路 19 min readGuided Pentest: WebLink to the Walkthrough/Challenge on TryHackMe: Guided Pentest: Web Introduction Imagine you have been hired as a penetration tester. Your client runs a small web application called RecruitX, an inter00
