Born2Root 2 CTF

This time I decided to check CTF prepared by Hadi Mene called "Born2Root". Let's find out how to solve it...

FourAndSix:2 CTF

Last time when I tried CTF from series prepared by Fred Wemeijer it was "4n6 - part 1". This time we will check 2nd VM - FourAndSix:2. Here we go...

FourAndSix:1 CTF

This time I tried 1st VM from the series called FourAndSix by Fred Wemeijer. Below you will find the details...

Stack Overflows for Beginners - CTF - part 1

When I was searching for some 'new VM' at VulnHub I saw that there is a "Stack Overflows for Beginners: 1" CTF. I decided to try it...

RootThis CTF

Next CTF I tried was RootThis CTF from VulnHub prepared by Fred Wemeijer. Below you will find few details from the journey...

Creating evil module for Drupal

During few pentests I saw that there is a Drupal installed on remote box. I was wondering if there is a way to get a shell when we already have admin's credentials. Below you will find a way that worked for me few times. Here we go...

LazySysAdmin CTF

This time I tried to solve CTF called LazySysAdmin prepared by @TogieMcdogie. You can find it here thanks to VulnHub. Here we go...

Crashing XnView 2.48

Last time when we talked about bugs in XnView I was surprised 'how good' can be the response 'from the Vendor'. But when 'response' is not 'responsible' - responsible disclosure is pointless. So, here we go...

DLL Injection - part 2

Last time when DLL injection was mentioned on the blog was related to exploiting 7zip by replacing DLL files. This time we will try something else...

DC-1:1 CTF

Next CTF from VulnHub I tried was DC-1 prepared by DCAU. Below you will find few details about it...