LTLưu Tuấn Anhinblog.fiscybersec.com·3d ago · 12 min read13 Minutes to Lose Money: How WindRelay Turned Android Phones into NFC Fraud Tools?Overview Did you know that it only takes 13 short minutes from the moment the victim picks up the phone to receive the support call from the "bank employee" until all the money in the account is evapo00
YPYogeshwar Peelainexploitnotes.hashnode.dev·4d ago · 8 min readTryHackMe : Athena WriteupOverview Athena is an easy-rated TryHackMe box that chains a leaked internal path (found via an anonymous SMB share) into a command injection vulnerability in a "router panel" ping tool, followed by a00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 15 · 11 min readTryHackMe : Different CTF writeupSummary Different CTF is an easy-rated Linux box built around a WordPress install with an exposed wp-config.php, an FTP service reachable with credentials hidden inside a steganographic image, and a c00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 7 · 11 min readTryHackMe : Infinity Pool WriteupSummary Recon on <MACHINE_IP> revealed a Gunicorn-hosted "Byte Lotus" hotel site with two paths disallowed in robots.txt - /internal/ and /status. The /status page exposes an internal staff tool ("Sis21N
NINeville Iregiinm0ng00s3-blog.hashnode.dev·May 5 · 9 min readHack The Box: PennyworthPennyworth is a Linux machine that focuses on exploiting weak credentials and remote command execution in. Default credentials can be used to get administrative access into Jenkins with which the Scri00
Rrecca0120inrecca0120.hashnode.dev·Apr 21 · 3 min readreverse_ssh: Manage Reverse Shells With Native SSH Syntax, No VPN RequiredOriginally published at recca0120.github.io You need to connect to a machine behind NAT with no public IP and inbound traffic blocked. The usual answers are VPN or ngrok-style tunnels, but both require setup on the target. reverse_ssh has the target ...00
NINeville Iregiinm0ng00s3-blog.hashnode.dev·Mar 21 · 12 min readHack The Box Lab: ThreeOrganizations of every type, size, and industry are using the cloud for a wide variety of use cases, such as data backup, storage, disaster recovery, email, virtual desktops, software development and 00
VNVũ Nhật Lâminblog.fiscybersec.com·Dec 8, 2025 · 8 min readPhân tích chiến dịch tấn công Tomiris 2025 – Báo cáo kỹ thuật chi tiếtTrong quá trình theo dõi nhóm APT Tomiris, chúng tôi đã phát hiện một loạt chiến dịch tấn công mới bắt đầu từ đầu năm 2025. Các hoạt động này nhắm vào các bộ ngoại giao, tổ chức liên chính phủ, và cơ quan nhà nước, cho thấy mục tiêu rõ ràng là cơ sở ...00
JSJonas Satkauskasincyberjourney.eu·Oct 20, 2025 · 4 min readHTB CPTS: Study session (Transferring files, Knowledge sources, Vulnerable Machines and apps, Reverse shell)Transferring files During any penetration testing exercise, it is likely that we will need to transfer files to the remote server. There are few options for this: One method is running a Python HTTP server on our machine and then using wget or cUR...00
SSShaikh Shafeeninkurtnettle.hashnode.dev·Aug 9, 2025 · 2 min readShell Upload | Task 6Problem Statement Prerequisites Network fundamentals (IP addresses, ports) netcat (basics like creating simple server) Familiarity in using a reverse shell Solution Our goal is to execute/run the shell on the server somehow, so how can we do it...10
