Protostar CTF - Stack3

After a while [0, 1, 2] - it’s time to solve Stack3 from Protostar CTF. Let's do it!

Protostar CTF - Stack2

I think it is a good time to start stack2 challenge from Protostar CTF. Below you will find the details. Here we go...

Protostar CTF - Stack1

Just like last time we will start directly from the new challenge - this time we will check stack1. Here we go...

Protostar CTF - Stack0

I decided to check one old CTF called Protostar (again;)). This time we will try to solve some 'stack challenges'. Let's start from the beginning...

XSS in Zurmo CRM

If you are already familiar with last 2 cases[1, 2] we can run our 'new Burp settings' with 'another webapp'. This time let's try Zurmo CRM. Here we go...

XSS in TestLink 1.9.19

Last time we talked about automating Burp scans to find few more low-hanging fruits during bug hunting. Today we will try to achieve similar results - this time for latest TestLink (1.9.19 available at Bitnami). Here we go...

XSS in DokuWiki

Last time we talked about DokuWiki when I was checking Bitnami resources. Today I decided to try it again but this time I used Burp Proxy to automate the process of finding bugs in webapps. Here we go...

Basic protocol fuzzing

Below you will find few notes related to basic protocol fuzzing. Here we go...

Unquoted path for CA Deploy Agents

Sometimes during pentest(s) we can find some not-so-usual ports open. Few of them you can find described here or here in latest posts. But today we will check "that 6600/tcp" port open. Here we go...

Few more quick tests

Last time I described small script you can use (or create) during your pentests. Below you will find a little continuation of the paths started last time. So...