Crashing ISPSoft

Few days ago I decided to fuzz a little bit one software available at Delta Electronics web page. This software is called ISPSoft and you can find it here. Below few quick results...

Pentesting AD - enumeration

Last time we prepared some small "AD environment". This time we'll try to 'enumerate AD' to get some useful information about the target. Here we go...

Pentesting AD - preparing environment

This time we will prepare our own small "AD environment". To do this ...

Learning routers - part 2

It's been a while since I was checking router firmware(s) last time ('officially' ;] anyway... ). Today we will try to prepare a "working environment" again but this time we will use buildroot to do that. Here we go...

Matrix - CTF

Last time I got a pleasure to check one of the latest CTF VMs shared by Vulnhub, called Matrix. So let's see if there is no spoon... ;) Here we go...

Crashing LibreCAD 2.1.3

In the meantime I had a moment to run fuzzer against LibreCAD. Below you will find few notes about the crash found in version I tried - 2.1.3. Here we go...

Freshly CTF

This time I decided to check one of the CTFs prepared by TopHatSec and shared here - thanks to VulnHub. Below you will find notes from the journey. Here we go...

Misconfigured Redis

One of the category of VMs available on Bitnami was tagged as #database. I decided to check Redis this time. My goal was to install it on clean Ubuntu 18 server and configure as 'vulnerable'. Let's say it will be our small 'vulnerable Redis Lab' ;) Here we go...

Stored XSS in Dolibarr 8.0.2

Last time I found few XSS bugs in Dolibarr ERP/CRM (version 8.0.2) available at Bitnami. Maybe you will find it useful...

OpenLDAP - from XSS to RCE

Today I was using OpenLDAP VM from TurnKeyLinux (version 1.2.3 - available here). After I found some small bug (postauth stored XSS) I was wondering how can I use it during my 'pentest'. Below you will find an example.

Here we go...