AWS Red Team Expert (ARTE) – My SITREP and review
AWS Red Team Expert (ARTE) – My SITREP and reviewIntroduction🌟 If you’re looking to level up your cloud security skills, the HackTricks AWS Red Team Expert (ARTE) certification is a fantastic choice. This credential validates your ability to penetration test AWS environments, making it a valuable certification for both offensive and defensive security professionals.
AWS has been around since 2006, yet red teaming resources for AWS remain relatively scarce compared to traditional penetration t ...
Yet another OSCP war story
I passed my OSCP in my first attempt (70 + 10)! I want to share my experience because I learned so much by reading other’s war stories!
Background
2nd year University Student
start to play with computers since 6 years old
did 3 years of competitive programming (solving questions like those in leetcode) in high school using CPP
4 years Linux user. (began with raspberry Pi)
I grew interest in Cybersecurity because of liveoverflow. I I also learned basic computer network, assembly / reverse e ...
Proving-Ground-Nickel-Walkthrough
NickelFootholdEnumeration1234567891011121314151617181920212223242526272829303132333435363738Nmap scan report for 192.168.121.99Host is up (0.019s latency).Not shown: 65528 filtered tcp ports (no-response)PORT STATE SERVICE VERSION21/tcp open ftp FileZilla ftpd| ftp-syst: |_ SYST: UNIX emulated by FileZilla22/tcp open ssh OpenSSH for_Windows_8.1 (protocol 2.0)| ssh-hostkey: | 3072 86:84:fd:d5:43:27:05:cf:a7:f2:e9:e2:75:70:d5:f3 (RSA)| 256 9c:93:cf:48:a9 ...
Notes for HTB Machine Labs
short notes for HTB Machine Lab
Hacking the ECB!
This article is not about cracking ECB encryption, but how to abuse it. If you are looking for how to bruteforce ECB, this is not what you are looking for.
I recommend you read this https://zachgrace.com/posts/attacking-ecb/ if you find my article hard to understand.
What is ECB(Electronic Code Book)?You actually can get a well understanding in WikipediaI want to clarify one picture in wikipedia.
ECB actually divide the original plain text into a lot of blocks. Then it use Block cipher encrypt ...
Strategy in SQL injection
Union Operatorhttps://www.w3schools.com/sql/sql_union.asp
use ORDER BY keyword to guess the number of column in O(logN)12345678DB_NAME: CustomersCustomerID CustomerName Country1 Alfreds Futterkiste Germany2 Ana Trujillo Emparedados Mexico3 Antonio Moreno Taquería Mexico4 Around the Horn UK5 Berglunds snabbköp Sweden
For example, SELECT * FROM Customers ORDER BY Country will sort customers column in Country order. ...





