Home
Muhammad Adel
Cancel

Hackerone BugDB challenge Writeup

Peace be upon all of you, on this writeup I am going to cover the solutions of three challenges on Hacekrone related to GraphQL, they have three parts under the name BugDB v1/3. Difficulty: Easy a...

Cybertalents Crashed Machine Writeup

Description Get The highest privilege on the machine and find the flag! Difficulty: Hard Target IP: 3.122.178.169 Target IP: 18.193.129.237 ‌Challenge Link: https://cybertalents.com/challenges...

Cybertalents Shadower Machine Writeup

Description Get The highest privilege on the machine and find the flag! Target IP: 35.156.4.248 Challenge Link: https://cybertalents.com/challenges/machines/shadower User Nmap PORT STATE SE...

Cybertalents String highlighter Web Challenge Writeup

Description Flag is hidden somewhere in the directory. Difficulty: Hard Challenge Link: https://cybertalents.com/challenges/web/string-highlighter ‌ Solution Exploring From the name of the cha...

Cybertalents Wrong Token Web Challenge Writeup

Description Request to the flag is forbidden due to wrong CSRF token … can you fix it and reveal the flag Difficulty: hard Challenge Link: https://cybertalents.com/challenges/web/wrong-token So...

Cybertalents F2UP Web Challenge Writeup

Description this is the most secure way to file upload is it ? Difficulty: Medium Challenge Link: https://cybertalents.com/challenges/web/f2up Solution Exploring When open the challenge you w...

Cybertalents SkiddyKill3r Web Challenge Writeup

Description Creative Thinking will make getting the flag so much easier Difficulty: Easy Challenge Link: https://cybertalents.com/challenges/web/skiddykill3r Solution Exploring The homepage c...

Cybertalents xCorp Web Challenge Writeup

Description X corp made a new filtration for input data, prove it is secure enough. ‌Difficulty: Easy Challenge Link: https://cybertalents.com/challenges/web/x-corp Solution It an easy challen...

Active Directory Attacks

LLMNR Poisoning It stands for Link-Local Multicast Name Resolution. it acts as a host discovery/identification method in windows systems. LLMNR and NBT-NS (NetBios Name System)are used as an alter...

Active Directory Enumeration

Using PowerView Domain Information PS C:\Users> Get-NetDomain PS C:\Users> Get-NetDomain -Domain m.local PS C:\Users> Get-NetDomainSID PS C:\Users> Get-NetDomainController PS C:\Users...