nekr0ff | Cybersecurity Blog

Welcome to my Cybersecurity Blog – the internet’s corner for writeups, tips and resources of Red Teaming.

# D o n t B i t e

LAST WRITEUPS

Sunday – HTB writeup

We enumerate valid usernames via the legacy Finger protocol, obtain initial access through weak SSH credentials, harvest password hashes from an exposed shadow backup to crack credentials for lateral movement, and escalate privileges to root by abusing sudo permissions on wget via askpass execution.

Pilgrimage – HTB writeup

We discover an exposed Git repository to inspect backend source code, leverage an arbitrary file read vulnerability in ImageMagick (CVE-2022-44268) to extract an SQLite database containing user credentials, and escalate privileges by exploiting a path traversal flaw in an automated Binwalk scanner (CVE-2022-4510) to obtain a root shell.

Keeper – HTB writeup

On this machine we exploit default credentials in Request Tracker to harvest SSH user credentials from profile comments, recover the KeePass master password from a process crash dump via CVE-2023-32784, and convert an extracted PuTTY private key to achieve root access.

LAST TUTORIALS

Penelope: Advanced Reverse Shell Management, TTY Upgrading, and Multi-Session Orchestration

Unlock the power of Penelope, the advanced reverse shell management tool for Red Team operations! Say goodbye to chaotic listener management. With TTY upgrading and a robust framework, Penelope transforms how penetration testers handle reverse shells. Experience multi-session orchestration and built-in file transfer from a single interface. Whether probing Linux

Hashcat Tutorial: Master Password Cracking on Kali Linux

Learn Hashcat on Kali Linux: A step-by-step guide to dictionary attacks, brute-force masks, and entropy theory for professional password security auditing.

Mastering Bettercap: A Complete Step-by-Step Guide to MiTM Attacks

Step-by-step guide to ethical Man-in-the-Middle attacks using Bettercap. Learn ARP poisoning, DNS spoofing, and how to defend your network.