Python GUI from AI

After a while I decided to look back again at the Python's GUI in Tkinter. Below you'll find few notes about it. Here we go...

Simple SQL fuzzing for Junior Pentesters

Some time ago I was asked to pentest some network and identify possibly vulnerable network services there. One of them was SQL database. More details about it - you'll find below. Here we go...

Another one SAST to bytes

During one of the last evenings I decided to read and learn more about static source code review. In the past I had a pleasure to create (more or less) 'automated' tools to do it. This time I decided to not to start "from the beginning" but instead of: to learn more about SAST and SonarQube scanning scenarios. Here we go...

Kernel: Introduction

Few weeks ago I was invited by one Team to participate as a "guest" during some international CTF competition. Spoiler alert: as I failed strongly during kernel pwn challenges;) (read as: 'mostly all that I tried' ;)) I decided to 'go back' and learn more (to 'try harder' "next time" ;))... Below you'll find few notes from the journey. Here we go...

Postauth RCE for Ilias 5

Hi. This time we'll talk about one RCE bug I found during a reasearch for a pentest done 3 weeks ago. Webapp we'll try this time is called Ilias (tested: v5.0.3). Here we go..

Scanning Docker Images

Ok. So far we already know how to prepare a small lab based on docker as well as how to configure it. Today we'll try to find some bugs. Here we go...

Creating your first CTF VM

It's always a pleasure to play another new VM found on VulnHub. I was wondering how can I prepare a similar "CTF VM" by myself. Below you'll find few notes about it. Here we go...

Basic Pentest Lab with Docker

Few days ago I started reading some "new" materials I found about Docker. That's how I decided to write few notes about it. Here we go...