nekr0ff | Cybersecurity Blog

Welcome to my Cybersecurity Blog – the internet’s corner for writeups, tips and resources of Red Teaming.

# D o n t B i t e

LAST WRITEUPS

Hetemit – OffSec Practice Writeup

We exploit a Python eval() sink in a REST API for unauthenticated code execution, pivot a reverse shell over an egress-allowed port, and escalate to root by weaponizing a writable root systemd service triggered through a permitted sudo reboot.

Vault – OffSec Practice Writeup

We abuse a guest-writable SMB share to plant a malicious `.url` icon file that coerces a NetNTLMv2 hash from user `anirudh`, crack it offline, then weaponize `SeRestorePrivilege` with the Utilman.exe logon-screen hijack to execute as SYSTEM on the domain controller.

Access – OffSec Practice Writeup

We bypass an upload blacklist with a malicious `.htaccess` extension mapping for RCE, Kerberoast the `svc_mssql` service account and crack its TGS offline, pivot via `RunasCs`, then abuse `SeManageVolumePrivilege` to rewrite `C:\Windows` ACLs and DLL-hijack the print spooler for `NT AUTHORITY\SYSTEM`.

LAST TUTORIALS

Penelope: Advanced Reverse Shell Management, TTY Upgrading, and Multi-Session Orchestration

Unlock the power of Penelope, the advanced reverse shell management tool for Red Team operations! Say goodbye to chaotic listener management. With TTY upgrading and a robust framework, Penelope transforms how penetration testers handle reverse shells. Experience multi-session orchestration and built-in file transfer from a single interface. Whether probing Linux

Hashcat Tutorial: Master Password Cracking on Kali Linux

Learn Hashcat on Kali Linux: A step-by-step guide to dictionary attacks, brute-force masks, and entropy theory for professional password security auditing.

Mastering Bettercap: A Complete Step-by-Step Guide to MiTM Attacks

Step-by-step guide to ethical Man-in-the-Middle attacks using Bettercap. Learn ARP poisoning, DNS spoofing, and how to defend your network.