An approach with few take aways. Diagrams are always easier to understand, remember and follow. I’m here today with the a mind map, to approach, the thick client pen test on windows. A quick summary, about thick client. A thick client is the software on your system, with it’s own…

SAML Validation and Pen testing. This guide introduces the minimum requirements during validation and pen test of SAML implemented in your application. TL;DR Nowadays one of the most common ways of authentication is SAML (Security Assertion Markup Language). This is one of the ways in which we can implement Single Sign On into our applications. There…

The biggest attack blew 2021 in the start, where Microsoft Exchange Server was attacked by Hafnium — A Chinese group of hackers. The big buzz was created when almost all the important organizations including homeland security to Health Care organizations to 500 Fortune Companies, became victim of the attack. …

Devastating attack on Solarwinds in 2020, resulted into largest breaches that occurred. When I asked people, they knew only the fact, that attack was a supply chain attack, which had exploit incorporated in updates. Let’s dig deeper and know few more things. TERMINOLOGY Let’s go through some terminology before we end…

Today we will be coming across machine Feline. This machine is interesting as it has java de serialization in JSESSION id parameter. Without wasting time let’s jump in. ENUMERATION Nmap Scan for Service Versions with Default Scripts.

Veni Vidi Vici. After the endless efforts throughout the year, I finally achieved my Offensive Security Certified Professional certification on 5th FEB 2021. Though everyone shares the experience and their journey, but I will definitely love to add mine to the bibliotheca. …

What ?? Another part of Sneaky HTB box ??? Might be. But was fun to solve it. Real life phishing attack practice. User part was definitely a level up. Let’s start. ENUMERATION Full port nmap scan for TCP ports reveals following

Recently retired machine, fits under OSCP like machines list. Quite similar to another HTB machine Jerry. Better exploitation in privilege escalation part. ENUMERATION Nmap scan with default scripts for version scan leads us to following open ports.

Well, totally a hard machine, required a lots of nudges and help. Also it took some scripting and XPATH injection and hell of a ride. Without wasting time let’s start. ENUMERATION Nmap scan for unbalanced using default scripts and service versions we see.