X-c3ll.github.io Website Review

██▄ ████▄ ████▄ █▀▄▀█ ▄▄▄▄▄ ██▄ ██ ▀▄ ▄ ▄ ██ ▄ █ █ █ █ █ █ █ █ █ █ █ ▀▄ █ █ █ █ █ █ █ █ █ █ █ ▀▀▀ █ █ █ █ █ █ █ █ ▄ █ ▄ ▀▀▀▀▄ █ █ █▄▄█ ▀█ █ █ █▄▄█ █ █ █ █ █ █ ▀████ ▀████ █ █ ▀▄▄▄▄▀ █ █ █ █ █ █ █ █ █ █ █ ███▄ █ ███▀ █ ███▀ █ ▄▀ █ █ █ █▄ ▄█ ▀ ▀ Just a blog to preserve some thoughts about Red Teaming :) :: 2020-05-28 11:22:33 +0000 :: Brief description of how to use GetEnvironmentVariable as an Description of how to pivot though the MySQL service. Turning MySQL into a SOCKS5 that can be used by proxychains. Article describing how we used LIEF to isolate target functions and kaitai to describe the protocol. Walkthrough of discovering CVE-2018-7081 (memory corruption). Proof of Concept inside :) Example of how WFP can be used to communicate with an infected machine Examples of how the inotify API can be useful for the Red Team Some ideas about how to extract hidden parameters in PHP functions and how to find potential bypas*es Brief tutorial of how to use backend pipes in PowerDNS for exfiltration Solutions to the challenges made by me in Navaja Negra CTF (Web, Pwn, Rev. & Misc.) Description of how the vulnerability was found and a few indications about its explotability Article about how to build backdoors for the Zend Engine. Learn the basic usage of Frida with this tutorial. Build your own cheat with Frida. Description of how to backdoor PAM and exfiltrate credentials via DNS requests. Capture credentials FTW! Quick article about how to improve well-known tools used in pentests. Forkpty() FTW!! Article about how to subvert file integrity checks made by most popular WordPress Plugins Example of how to abuse permissive environments to infect processes with custom code using ptrace